well, most of the time get hack cause of their own mistakes and careless ways ex:
is some one comes up say
[Agent]hey I'm from the FBI I have reasons to suspect that illegal
activities have underway through you server I would like your cooperations............
[moron]Yeah anything
[Agent]Give me your password so I could look at your files and logs you have stored.
[moron]sure.
and voila....
account hack....
I think this is called social engineering in hacker's terms.