Weak password allowed hackers to sink a 158-year-old company