Imagine if all government software was open source and significant bug reports and contributions were rewarded with cash... I hope we reach some happy medium between that and what we have today in the future.
Per the article, the attackers had to put "the taxpayer’s Social Security number, date of birth, address and tax filing status" into a form to get access.