Don't be delusional, there were/are obviously beaches which are not red herrings. And all that "classified nato secret", "not allowed on networks connected to the internet", "breach in protocols" and "strict rules" are BS.
But to say for sure, we would need a thorough analysis of the incriminated data.
I'm not saying this isn't bad enough. I'm just saying there are rules in place to prevent these kinds of things. Like physical network separation and machines with disabled interfaces (like network, usb, firewire). You would require physical access to steal data from those machines and it would be either guarded or locked away.
Data security is taken very seriously within the military & NATO but I can't speak for how other countries do things. Accidents happen, things are poorly secured.
I'm just speaking from my own experience, even if it is limited.
No I am saying that if they are doing their jobs properly any data accessible from the internet is data that would not pose (much) of a security threat if released. I agree that most likely a lot of them do poor jobs but you should not underestimate their rules, regulations and strictness when it comes to data security.
But to say for sure, we would need a thorough analysis of the incriminated data.