The article's claim isn't quite the same. It claims it's possible that "real hackers" broke into the museums servers and stole the data. It's a lot simpler to b

The article's claim isn't quite the same. It claims it's possible that "real hackers" broke into the museums servers and stole the data. It's a lot simpler to believe that an employee of the museum with access to the data simply stole the data they had access to in the course of their employment.