"They set up a backdoor, and all you see for the next 18 months is someone checking the back door a couple times a month, then suddenly they moved in and got data,"
Has anyone checked the dark web for a "For Sale" post? It sounds like someone got access and then started hawking it and finally found a buyer.