These could had been paid for hack jobs, by request of a local actor.
Since in most cases they can provide the hackers with the entry point in the servers.
All they need is one door to open!
99.99% of hacks were related with an insider provided entry point.
The culprit or mastermind is here in the DR.
The operator who knows which country or hole in the jungle/desert/etc...
