The line "How could I forget that I had given her an extra key?" comes to mind. Maybe someone left an API key laying around somewhere? Although I could be giving the hackers too much credit...