Hacker compromised the database by exploiting the SQL injection vulnerability. He found lot of bugs in that website.
"Hack on challenge they said they are secured" Hacker claimed as the reason of the attack.
In order to prove the unauthorized acces, he provide a screenshot that contains details about the database.