January report identified BST as hacking victim