I can guess, how this can happen.

--------------------- First,Take the db dump, for backups/setting up another server etc.

$ mysqldump -u <user> -p <password> <db name> > xyz.sql

Now, lets move db dump file to webroot, I hate SSH,FTP,RSYNC -- too complicated for me. I like clicking hyperlinks. KISS FTW!

I guess nobody will notice that file is present here. How can they know, I won't tell them!

$ mv xyz.sql public_html/uploaded/users

now, I can download it simply by going to

http://www.sosasta.com/uploaded/users/xyz.sql

See how easy this is, why complicate things unnecessarily.

---------------------

I guess the guy wouldn't have even imagined mighty google will index this & people from around will download the file, resulting in major security breach.

This is what you get when you act ignorant or plain lazy. poor guy...lol