Mandiant traced stolen inference keys to daily bills above $100,000, with some victims reaching $1 million before access was revoked.