What if the delay in the EO is a false flag to lower the defenses of the perpetrators. The Bloomberg report uses the term not enough whereas the EO uses the term any, so the delay could have two fold implications. The first is they found more involvement with more actors through the hack. The second part of the delay could possibly be that on the 6th of January the whole of Congress will be gathered in one place and the need to exhaust resources tracking individuals down in their day-to-day lives will no longer be needed. The best way to catch wild horses is to herd them into a box canyon and the Capitol building could very well be that box canyon. I don't know maybe I'm stretching here but never take any options off the table.