Even during the LulzSec saga Anonymous mostly did DDOSs and website defacing, with sporadic high-level hacks, but not all has to be hacking. Given the amorphous nature of the movement, even a lowly clerk/technician/etc. could leak evidence if they sympathize.

That being said, following the antics of LulzSec was my favorite part of 2011 by far.