So that person had insider knowledge of the techonology stack because he or she made a mysql dump instead of blindly copying the tables? Really?
AM was a PHP site, MySQL is exactly the database I expected it to have. Looks like I had insider knowledge too!
They dumped DBs / Repos / Mail, one would hope that they all resided on separate servers...
So? They still all are on the same network. If you are undetected (and if you found a good entry, you usually stay undetected), you can scout around for pretty much anything you want.
Oh just stating that they should have been separate. If they weren't... /facepalm (I know separation wouldn't have stopped it, just saying that all things on one is just asking for trouble).