Ex-TalkTalker TalkTalks: Records portal had shared password. It was 4 years old

Is that how crims nicked the engineers' data?

Exclusive Fraudsters who attempted to scam TalkTalk customers by using records of their maintenance engineer visits are thought to have bought that info from current or former staff."