They never contacted her to verify she was the person behind the email and the person that wrote comments in social media. They assumed it was her, but they did not verify it. Even a high school journalist knows this is the first rule to learn: if you assume = ass for you and me.