According to the linked heise.de article the defendant assumed the credentials were for a database that only contained his client's data, and immediately discon

According to the linked heise.de article the defendant assumed the credentials were for a database that only contained his client's data, and immediately disconnected as soon as he realized he was actually seeing data for all of the complainant's clients.