I don't find it hard to believe that it was hacked (if its software hasn't been updated in a decade or two, how many obvious exploits might be present?). It's h

I don't find it hard to believe that it was hacked (if its software hasn't been updated in a decade or two, how many obvious exploits might be present?). It's hard to believe, however, that they had a true "professional" security firm employed, especially considering the site they were running.