An organization trusted with the security of potentially billions of people essentially used the password “4” among other bad choices.

You can read the technical explanation here: emudhra.we-have-a-problem.com