kra database administrators should be held accountable here.all of them.even if they try pleading that the systems where infiltraded from outside and they had no control then its their duty to secure their system.there should be some strict compliance rules to be followed when such big sums are at stack like HTA Compliance in the U.S hospitals.a look at the database logs should give police clues unless those have also been cleared, lol. i feel like sherlock holmes