He hacked the server, not the client.