Quite a lot of the twitter security scene seem to be pointing towards Hal Martin. Apparently timeline and level of classification is consistent.

https://www.wsj.com/articles/former-nsa-contractor-indicted-...