Comment by mvkel

> According to the hacker, access was initially obtained using a leaked password belonging to a former employee of a small Danish company.

So the password could have been 32 alphanumerics with special characters and there still would have been a breach.

The password was not the problem here.