Perhaps firing expertise and hiring incompetents wasn't a good idea.

If your systems are compromised and need to coordinate, what do you even do if you can't trust anything, assuming the attacker is still inside the network?