"To be very clear: I do not have evidence that the Defense Commissary Agency was hacked."

Should be much closer to the top of the article. Otherwise this is just weird and potentially dangerously wrong research.