Either the founder stole the money himself, or the NSA showed the world just how powerful they are when they flex. If it’s the latter, I’m really impressed by their skills.
The guys developing the ransomware are not necessarily the guys behind this group. Even if the developers were in-house, they may not be managing the money. So hack may be not be as difficult as we might think.
It is kind of ironic actually, the ransomware targeted billing systems of colonial, however they didn't really secure their own money.