It wouldn't seem like any kind of hacking went on if some of the communications were actually un-encrypted (reading plain-text is not the same as decrypting something with a weak-key)? The article makes it sound like something you can check just by grabbing packets via. wire-shark. Some details are missing here...