They weren't even using SSL and only used HTTP Basic Authentication for supporting their logins. Every time a user logged in it was un-encrypted and anybody could've monitored it.
We need the Right Wing Dev Squad to help provide security audits to Alt-Right companies. We need to have very high security standards or else shit like this will inevitably happen.