Nothing new
Some years ago, France24 got hacked and was brought offline for a few days... (both the TV stream and all the social media accounts)
A colleague and me were asked to be ready to do a post mortem... We started looking at the press articles on the topic to get some backgrounf and one particular picture jumped out. from several articles.
there was some setup with a bunch of port-it on a cubicle separation,On some post its the passwords of all the social media accounts wer clearly readable. (along with the relevant accounts names)
We pointed that out to our $MANGLER telling him that it was pointless to do a post-mortem after a hacking when the new passwords could be read in almost all the articles found on Internet, and that the next hacking was probably already occuring or was hours away.
This was sent up the food chain... and we never heard about post-mortem ever again. (we also don't know if the passwords were changed)
So it's not surprise that the passwords on the security systemsat the Louvre are so simple. (because... reasons... the main reason being the guys at security are sub-contractors, rotates on a regular basis, and most of them are computer illiterate.)
I can also confirm the result of the 2017 audit and the W2K3 server for video, but I won't tell why I can do it.
For obvious reasons, there's a lot of stuff involved in the Access Control & Video Surveillance at the Louvre, and they have a massive overhaul project that was not really funded on that topic... that was expected to take 20 to 30 years to implement. (because... reasons... abd obviously by the time the whole thing is finished, it would be obsolete).
I guess now it's probably going to take less than a year.