I'd imagine direct and indirect infiltration. Hackers charged with crimes, who are part of a larger group, sometimes get plea deals. As part of their deals, they might give up accounts, keys, data, or evidence from the group, and/or work as confidential informants for the government.