Attacking a broad spread of companies allows the group to access potentially valuable ‘bonus’ data from unexpected sources.