If the data does not end up on underground sites for cybercriminals to purchase -- and it has not yet, even though the breach occurred in December -- then it is likely not being used for cybercrime," said Anup Ghosh, founder of malware-detection firm Invincea.
China has been accused of hacking in the past.