From what I’ve heard, sometimes the hacked institutions bow in the form of delaying, or even completely ditching Project 2025-style plans. Other times the institution has enough Russia and/or China ties, that a naive tankie within the group sabotages the whole effort. Yet other times they’re being paid a lot of money and being given certain guarantees (ability of leaving the country in case the hacker’s civil identities become illegal, etc.).