I don't think NGP-VAN is involved. I believe the DNC is using this "crisis" (never let one go to waste, am I right?) in order to discredit Sanders' campaign (as the DNC is cozy with the Clintons).
Yeah, that seems to be a reasonable conclusion here(esp since Sanders campaign reported a similar breach in other software but we don't see the DNC acting the same).