That is true. Obviously there were vulnerabilities.
Remember though, that regardless of the strength of the server, trust is placed on those who are in control. Everything from physical security at their points of access and servers, as well as the site structure itself.
Sabotage from rival...