“Hacked” or “let in”, I think that is unnecessarily splitting hairs on terms now… malicious access to unauthorised systems gained through malicious means with malicious intent. I’d still call that “hacked”.
From what I understand, the [not Optus, possibly Medibank, I don’t know exactly] event...