Media sure does toss these words around a lot. 

The media says google “pilfered” data

I agree with the stuff on the bottom though. Likely, the server was either misconfigured, or used http based authentication and someone stuck a link on their website with the username and password located in it. They really should have used a robots.txt file.