Shouldn't be difficult to fix, but they should be very worried about server vulnerability now.
Hacking is a really serious problem. I own a hosting company and the way servers get attacked by criminals (usually in russia) is VERY bad. One of my online shopping sites got hacked the other day, but very unobtrusively. They only changed many of the links on the pages to redirect shoppers to inadvertently download a virus which collects loads of stuff about a computer (passwords, etc.) and then emails them to the hacker. Running an online shop has turned into a nightmare - about half the sales are fraudulently done with hacked Paypal accounts and/or credit card info.