I mean, the "inside job" theory seems to have more evidence, because as was pointed out hackers don't normally wait months to execute their attacks. And are more likely to use automation.