How did the institution react to a criminal act which compromised data, destroyed servers and damaged a reputation?