It wasn't weakness in that software - as indeed, not all customers were 'hacked'.
They just utilised that software, in the same way scammers of old used to target if you had a Telstra account, or called you about "your Windows" or Westpac, or Australia Post and so on. If you then give them the...