[Anderkent]

Or they found a file read vulnerability, or a server was misconfigured for a period and allowed files to be read, or a multitude of other options.