the who is important
you shouldn't blindly ignore who the perpetrator is, hopefully it may become obvious while investigating how. merely, the investigation into who, shouldn't get in the way of how.
my reasoning, i wouldn't be happy to learn the person i hired to repair my boiler was the same person who had earlier stole my last tin of beans!
if someone had plucked my customer database, i wouldn't be happy to find i'd later employed that person, or said person had been employed by a competitor in ignorance of the theft, for example
Biting the hand that feeds IT
