While examinations of the 2016 SEC breach continue, there are signs the attack could have been part of a broader intrusion aimed at other government agencies or private companies.