Let's put aside the politics for a moment.
Is it really that easy to compromise a server, or is a high profile high value target really handling security so poorly?
It makes me wonder if one of my machines were actively being attacked if the intruder would be able to break in.