This has everything to do with the company. Compromise the database, lose subscribers, take the entire thing down.

The membership database is the most valued asset they have.

The membership database has people in it ... fine. It's the duty of the company to protect the asset and not put it in danger.