If you build nuclear subs for the government then why aren't your computers that store sensitive data airgapped or even located in the building to access that server. Hell you need to hire a real network admin and data admin if these fuckers are hacking you or at least do a security audit every few months. This is a shabby security setup if the chinese can walk right in. Hell disable off site computer usage altogether and fuck the management, if they need something get off their ass and drive to work. Devs only can work there and no laptops taken home or other data. This is stuff a teenager could tell them, maybe not implement but realize it's a security risk.