> I am at a loss for words. This wasn't a sophisticated attack.

To be fair, data security breaches seldom are.