Since the data seems to have been stolen around the time MtGox shutdown or later the question would be ... why would you keep this information on a webserver if you aren't actively using it anymore?
Whoever is in charge of reorganization definitely did not do due diligence and take exclusive control of the company's servers, where ever they may be. That should have been obvious once the nature of mtGox's business was understood.