(Stripe's CEO here.) It is emphatically against our policy. The employee involved was identified before the article was published and they no longer work at Stripe.
Those are the sort of questions that should be addressed in public, not in a side discussion on an unrelated comment thread.
But the actual point of my comment was that HN may have a bit of the PH filtering effect going on.
You've released this scumbag back into the pool to continue his shenanigans elsewhere.
You've covered your ass, and now he's someone else's problem, right?
I have heard several stories from small business owners who fire an employee who was stealing or committing some other crime, but they don't actively tell anyone who calls for a reference because they don't want to open themselves up to legal issues.
Even if Stripe can prove that the person did this, potential lawsuits could be incredibly distracting and expensive.