"Breach" in this case would imply this was an external attacker and not an inside job; from all the info that is available at the moment, what appears to have h

"Breach" in this case would imply this was an external attacker and not an inside job; from all the info that is available at the moment, what appears to have happened is some guy with continous access to an entirely legitimate system but malicious intent basically managed to craft his own dump of all the records. Based solely on the exposed field names those are not typical for government databases either, so this might have been reconstructed from a report or something. It also looks like the underlying permissions scheme is garbage, as there is literally no reason for this volume of data to be exportable by a random -even authorized!- user at the reported location.