Could have been an inside job, but I wouldn't dismiss the possibility of some kind of extreme social engineering, where an outsider gained trust and was able to

Could have been an inside job, but I wouldn't dismiss the possibility of some kind of extreme social engineering, where an outsider gained trust and was able to glean a lot of the information you mention through non-technical means.