Cyber-snoops broke into US military contractor, stole data, hid for months