I suspect that the purpose of these attacks is not simple identity theft. They must have a much more nefarious purpose, like gaining access information to other systems. Just think they have the information of every high level government employee, generals, admirals, cabinet members, congress, NSA CIA, etc, etc.
Maybe they will generate thousands of fake orders just as they launch an attack.