Security breach on extension

This was just a phone which was plugged into the router, nothing more done for port forwarding.

So I am at a loss how they could have gotten the password.