I'm a little unclear on how they found this database and why it was left without security. It sounds like there is some well known vulnerabilities with older ve

I'm a little unclear on how they found this database and why it was left without security. It sounds like there is some well known vulnerabilities with older versions of Mongo and these people did some security audits where they found this particular database. Is the explanation for why this database was left vulnerable just a mistake on the part of the money launderers?