Hackers stole nearly 600 terabytes of data during an intrusion that lasted eight months and impacted at least 7,500 individuals.