Yeah, a lot of hacks work not because of the genius of the hacker but of the stupidity of the targets.
Last month the leading Internet security firm in the UK was hacked. People at first thought it must have been some genius.
Nope. Instead the hacker guessed, correctly, that while the tech people there would be really security conscious the human relationship department would not have been hired based on technical skills. So, they just sent emails with malware attached that looked like a work related Excell spreadsheet to everyone in human resources.
One 18 year old intern opened the mail and downloaded the file which then infected the entire system.