I don't know anything about this specific story, and won't comment on it. But, this is actually a common attack vector that people with nefarious purposes use. They come up with a story that makes some company look bad, but leave out important details (like they were trying to hijack accounts, spamming, etc...). Some of these people will do this either to get policies changed in their benefit, or as a form of revenge for getting caught.

It's important to remember that all stories have 2 sides, and to consider other possibilities when you only hear one side of a story.