I would be interested if they could release all pertinent logs. I think it would be something interesting to spool through.
For instance "large scale attack" makes me assume a DDoS, which is hardly the level of attack I'd expect to risk data exfiltration unless it is used as a distraction.
So I'm not sure what "large-scale" means in this context; eitherway, pcaps plz.