From the article it looks like all they did to find the fraudsters was run a basic database query.  That could be done in a few hours from getting the data, writing the query, and getting the results..  They could have done this years ago.