If Lapsus$ has purchased credentials for a network, they can effectively operate as an insider threat, taking advantage of the same privileges the employee has inside the network.  Focus on general information security best practices: MFA, access controls and network segmentation.