Hacker News new | ask | show | jobs
by sthatipamala 1213 days ago
They know what the bandwidth graph looks like when a full DB replication/dump is in progress.

Since that level of data transfer only occurred once (when they did it), they know the attacker did not actually transfer any data.