they had SQL requests in the client side code, which allowed the hacker to literally just ask for the accounts and passwords. Also the servers that it was on was 10 years out of date.
R.I.P. to all the 4chan pass users…their money was NOT put to good use.