With this in mind, one of the theories about the hack was that one of HipChat’s cloud boxes, that’s obviously running an infected HipChat Server, got pwned by criminals that wanted to exploit Struts 2.