Let me guess without reading the article: The data was stored on an unecrypted drive connected to a computer in a network running with Windows, Active Directory, and Outlook/Exchange?

With that combo, you can just post your “secret” data on the web site, it won’t make much of a difference.