Because the people running these services apparently cared more for quick money than for security. Or running their own server. I mean, who runs that kind of thing on a cheap rented server? No pity here.

They took a risk, and one don't always win when taking a risk. (You startup folks should know.)