How did no-fly list of suspected terrorists end up online?

A regional airline in Ohio was hosting the list on an unsecured computer server.