I agree with Cleave and suspect the hack may well have been accomplished by developers who decided (or were forced) to skip a step or two. Businesses tend to respond to external hacks by going black until they can determine the full extent of the damage.