The attackers exfiltrated sensitive data, including proprietary research and operational plans, exacerbating the impact of the attack. The activity is attributed to the Sandworm group known for its destructive attacks and targeting of ICS/SCADA systems.