According to many news sources (hence no links, as it's one of top stories on pretty much all news websites as well as national news), it seems that four Chinese nationals were indicted today for the breach.

Perhaps they are sitting on the info and why people were not as badly effected as some of us feared.

As side note, I'm surprised no one posted this before me.