Based on the article at least 30.000 internet-accessible installations.

The same people that run an unsecured database that's accessible over the internet.