I think "Hacker" is a stretch in this instance. When you try and succeed at logging in with "123456" as a password... To permit McDonalds to say they were the victim of hacking is a disservice to organizations who have been hacked. They left the data unprotected and should be held liable for criminal negligence.