That makes for nice headlines, but anyone who actually understands this stuff knows that hacking the public-facing web server is not a big deal and not really related to obtaining private info like this.

Edit: I just remembered, there is (of course) a relevant xkcd for this: https://xkcd.com/932/