It's more like the hackers bribed the sysadmins to give them root access, and the users couldn't afford big enough bribes for the sysadmin to care about them.