They also don't disclose how the files were stolen - SQL injection? Social engineering? Compromised email account? I mean, obviously they don't want to draw

They also don't disclose how the files were stolen - SQL injection? Social engineering? Compromised email account? I mean, obviously they don't want to draw specific attention to what methods were effective to sneak into the freakin' military, but I suspect it was something simple like that. It seems to always be the case these days. It interests me though, because I just launched a startup to help mitigate broken-into email accounts: http://www.emailambush.com/ http://www.emailambush.com/ I wonder if it WAS a hacked email account, with someone just sitting there, slurping down emailed Word and Excel files. Further, I wonder how the heck I'd even begin to approach them about my service, should that turn out to be the case. I've never dealt with large-scale procurement-style folks before.