What they did is forcibly enter places they weren’t supposed to be allowed access to and take over their systems. Incidentally, most of those places held data owned by groups with regulatory authority over some or all of his businesses.