Looks like someone got access to their server. Could have been through a complicated exploit. Could have used a easy password and it was brute forced. Usually it’s through leaked password from another leak. Reusing the same password. They could have leaked their ssh key somewhere by accident. Who knows. Any number of things could have happened.