the Google-owned cybersecurity firm Mandiant found that a “financially motivated threat actor” had stolen a “significant ...