The bullshit spin from both the Gov's and Prosecutor's office is pretty hilarious. They simply had no case but just couldn't bring themselves to say so.
Combination of the prosecutor not wanting to admit the district was at fault all along, and general tech illiteracy all around perpetuated by local and national news throwing around the term "hacking" in this case.
I would love to hear how the developer came to implement this.
Knowing this type of work, I can entertain that many layers of tech illiteracy, approvals, and "this is a bad idea" type emails preceded this implementation in the face of some immovable, beaucractically mandated backend.