They used one of those databases which are easy to connect directly to the internet, it's the same thing as about 90% of modern data breaches.
Every generation we make things much easier, lower the bar, and are rewarded when amateurs make amateur mistakes like this.