The UA system is frightfully trivial; local physical access, low security policies and lax oversight make for a very vulnerable infrastructure. I'll be the first to admit that it could have been a lot worse, but it should certainly be a wakeup call to the IT department.