So presumably the server was running dodgy code. They need to look at whether this was preventable or detectable.
Not a member of The Register? Create a new account here.
Remember me on this computer? Post anonymously?