They got hacked through the hypervisor, but it’s not the hypervisor’s fault. Blame their hosting service.