>Unlikely to be a hack, more likely to be a misconfiguration or update sent incorrectly.

These two states are indistinguishable from each other. A good hack looks like a poorly configured maintenance update, and vice versa.