I take it you've never worked in information security, because cleaning up after a mess like this is an enormous time suck and they will need to audit their data to make sure it hasn't been "adjusted". (From a national security perspective, I bet derailing a competitor's vaccine trials is at least as valuable as "stealing" data that was already going to become public in the near future.) That means spending time and money that would be better spent doing just about anything else, if it weren't for human nature.