i mentioned this to a .gov friend who suggested the sites had been compromised for years and sessions pulled the trigger on the investigation for publicity / pr reasons.