The investigation determined that the unauthorized party accessed and acquired files from systems over more than a month.