It is possible that someone hacked them, perhaps the russians?
no. stop. i am going to stop you right there. do not just randomly bring russians into this.
you also probably didn't read the article at all, because there's this:
Deep Root’s data was exposed after the company updated its security settings on June 1, Lundry said. Deep Root has retained Stroz Friedberg, a cybersecurity and digital forensics firm, to investigate. “Based on the information we have gathered thus far, we do not believe that our systems have been hacked,” Lundry added.