the question of hackable is really no longer appropriate. is it possible it got hacked? sure. but at this point occams razor would suggest someone got phished and the attacker piggy backed in.
providing of course you discard the more obvious occams razor about an 'insider threat', which is a whole lot more likely.