The method for asking for it always needs to go through the inner sanctum. A bulk dump impossible.
According to the article, they didn’t access credit reports. Just SS numbers and other personal data. That would have been a total disaster if they did.