The criminals used a mix of new (AI) and old (stolen credentials) tooling during their data-theft spree, and in some cases ...