Payment data, including card data, was obtained as well. This would not be held by the crowdfunding platform, but by the payment processor only, that are subject to quite a few rules and annual audits.

Definitely a hack.

Besides, opening unlocked doors can still get you charged with break and entry, or in this case, unauthorized access.