A grey hat hacker named 1×0123 announced April 12 that Mossack Fonseca's content management system had not been secured from SQL injection, a well-known database attack vector, and that he had been able to access the customer database because of this.
