Or someone somehow got into one web interface (e.g. by popping a random workstation used to monitor all these sites) and clicked buttons.