"...inserted by the one man responsible for information security at an organization that runs three dozen United States lotteries."

That's the entire problem, right there. He could have been much more brazen and still succeeded.