Anything that is externally accessible can be hacked.
Most vcrs in the day had 232 ports on them with no security at all
But now with a poorly secured system patterns can be viewed ie when your out always, see a person's routine without parking outside etc etc
Different subject but a takeover should always be fully defaulted and reprogrammed to prevent issues like this.plus you dont know whats sparre off etc.
however timstool?
Sounds like it was a takeover without defaulting panel (dangerous and shouldn't be done Imo)
As it wasn't defaulted the comms programming is still calling home itself giving the previous provider with full remote access.
Only way to remove the password is to default.
Then only you can access etc
it was in alarm and you have silenced it?
have you pressed reset?
assuming you dont care about it and not serviced etc?
do your neighbours a favour and decomission it before it causes you a problem
alternatively if your asking for the burglar code that kills a system,obviously it doesn't exist outside of diy grade systems