Nobody knows who hacked him. Any sophisticated hacker could’ve potentially pulled it off. Regardless, his security practices was poor.