Its entire network was knocked offline. While it was scrambling to get back up, the attacker published customer data and a list of the security holes purportedly found.