[KaiserPro]

Very much the later.

as for how they did it..

I only have experience with Visual effects, the post house that was "hacked" was an audio place.

They are much smaller, and have much less engineering staff to deal with this sort of thing.

If I was a hacker, I'd be targeting the FTP/aspera server, or the cinesync machine(its a way of showing what work you've done without having to move the data, like logmein, but colour correct, and with doodling features.)

Or they might have just walked in dressed as a runner and stole a bunch of drives.