Maybe. The IP address that is referenced in the subpoena (12.218.239.38) is the IP address of cookcountyboardofreview.com. Maybe that box got hacked and it had access to some big cook county DMZ?
Sounds like an inside job to me. Why would a 'hacker' file false unemployment claims for government employees? I bet one of these filings is the person who filed-- and the rest are just noise to cover their tracks.