Internal government memos provide the first indication of which parts of the government were most affected by the breach.