I hope Adobe et. al. have deployed some log archival &#38; query (SIEM) solution like SenSage (<a href="http://www.sensage.com" rel="nofollow">http://www.sensage.com</a>).  If so they'll have records needed for forensic reconstruction of the attack, and find a way to remedy their problem.  If not, they're flying blind (or at least near-sighted).  It will be interesting to see whether this is an inside job.