Why?
Why was the testing system on the internet?
Why was it using live data?
If it had to be on the net, why didn't they lock it down to specific IP addresses? Why didnt they turn it off when it wasn't being used?
Did they hire their web guys on Fiverr?
The mind boggles.