BetVictor left the key under the mat. Internal help documents that revealed admin passwords (a shoddy enough practice) were made available to the public site.
Follow the link for details and screenshots of how the site's search box threw up these documents. It concludes: I think that’s the digital equivalent of leaving the key under the mat. Information about BetVictor’s back-end systems and portals — usernames, passwords, URLs — is there, just a few clicks away, right on the homepage.