[sorlon]

The report doesn't appear to mention that you could just login to their web portal with an obvious password [1].

That was a different portal and a different breach.