A source I read said that during an upgrade a firewall was disabled to allow the software patch but never reinitialized. This allowed an entryway into the service. Login to read more.