NSA is def legit but i'm not sure i understand what you mean. they have master encryption keys for like SIM cards but not sure how that applies to servers. imo, this probably wasn't even an sql attack but something much more basic such as employee or datacenter techs with physical access to the server.