Some don't even need to be hacked. The person just thought they didn't need a login and left everything open.