The attackers were deep inside Treasury Department email systems doing whatever they wanted.