Also, I tend to think that maintaining these interactions going might be a way to let more information into Naughty Korea and might actually have a positive influence in the long run.
Hiring mischievous North Koreans is fully in line with your CIO's new priorities, which she heard about at a conference once.
That's why there's no one industry or types of businesses being targeted, it's anywhere they can get hired. If your a high profile target, that's a bonus not the original goal.
Probably got lucky otherwise I would have no work myself because I think the client isn't that rich, they would go out of business from ransomware attack