There wasn't much talent involved in this hack. The CEO and solo self-taught developer of the psychotherapy place left a test server running on the public internet with the username and password root / root.