Despite the scale of what is potentially the largest supply chain attack in history, the attacker only stole a minimal amount