They could do it quicker by starting with the most common PINs [1]. This all assumes the build in locks to prevent brute force don't work.

[1] http://www.datagenetics.com/blog/september32012/