[ejcx]

> Very vague on details. No links to exact researchers or their findings.

That's the whole point. When you are dealing with a major security incident (anything impacting a countries ID cards would count), one of the first things you should do is tell the world that something is happening and the steps you took to stop the bleeding.

The information will come =]