The hackers claim to have exploited a SQL flaw to get the data.

Link Removed