I wonder what files were being targeted for deletion? They may have chosen the carpet bomb approach with the aim of attacking selected machines with compromising files.
The best place to hide a tree is in a forest. They can apologize later (as they are doing now) once the job is done.
Let that sink in for a moment.