Not exactly the world's most exciting or difficult hack. But that makes it kind of interesting in a way - how many companies out there are still pretty lousy at the basics, like not having externally-accessible services with no authentication?
Maybe it would be a good idea to set up automated periodic external scans of your network to check for any unexpected accessible services. Don't know if anybody's doing that already, though.
Seriously?!