".... default credentials..." Sounds like the primary access was through default creds. So if you were smart enough to change them, you're probably OK. If you didn't change them, that's on you.