The investigation into last month's breach reveals a link to a former Accenture employee in the Philippines.