[mothered]

To be honest, the amount of devices doesn't necessarily mean anything. The data on the devices is what's important in this circumstance.

In this particular breach, I'm evaluating the nature of the data against the number of devices- both of which are significant, and certainly a cause for concern:

The attackers are claiming to have gained access to 1TB of sensitive data

What I do wonder is how this was not discovered, since it must be quite a bit of exfiltrating. Maybe SNIcat?

Perhaps an Inside job?