The operation culminated with the exfiltration of sensitive documents from the government network. The attacker used a compromised user account to transfer the files to an external server, marking the completion of the intelligence-gathering mission.