This is a simple question that very likely has no simple answer. They probably have a mess of different identity management solutions within the various depart

This is a simple question that very likely has no simple answer. They probably have a mess of different identity management solutions within the various departments, schools, and collaborators; with lots of really old security policies. It's possible no one even realized there was a hole until these guys made their site. Unable to figure out a deep security solution fast enough to keep up with a couple of young hackers, they shut the site down instead.