Pre-school chain Carpe Diem's website hacked

So where are threats and hackers coming from?
Internet.

So where are the chokepoints?
Internet.

Are there backdoors - in addition to the chokepoints?

Eg. wireless devices accessing Internet bypassing the protected chokepoints and download unauthorised stuff into your notebook and upload into your servers.

Are there dormant, latent, hidden content in supposedly safe heavens - such as servers, storage spaces of supposedly harmless devices - waiting to strike.

Most important, can your public Web portal be administered remotely? If yes, the Web portal become a good candidate for hacking.