Note how they all keep calling it unauthorised repeatedly. This is because in order for a cyber hacking crime to have occurred the access must have been unauthorised, and what that means is that a person accessed a protected database they otherwise should not have had the means to access. In this instance, the public was authorised to access their database since the link was not protected. In essence the entire world was “authorised” from a technical perspective.