Any number of things could happen; maybe someone got access to a code repository, or a stray flash drive, or the web server was mis-configured and served the file as plain text (happened to fb once) etc.

Or they found a file read vulnerability, or a server was misconfigured for a period and allowed files to be read, or a multitude of other options.

4chan (or just moot's account) was hacked yesterday.