Disclosure: I work at EMC. It's sad to see that the most detail of the attack we employees of EMC have seen comes from an outside source. The infiltration clea

Disclosure: I work at EMC. It's sad to see that the most detail of the attack we employees of EMC have seen comes from an outside source. The infiltration clearly began by targeting EMC employee(s) not RSA. It's been many months since the attack with nothing being told to the employees whatsoever. I've even heard additional stories about other attempts at social engineering to gain more information recently. I'll answer questions that I can if anyone is interested but as mentioned above, we really aren't informed ourselves. To address your first point: I was under the impression seeds were stored for most(all?) customers for "bakcup" purposes. These were taken and matched against SecureID serials for use in more social engineering attacks (getting the other part of the two-factor auth).