Consider how this would have played out if they didn't shut down the links and then someone hacked an "important" document? It would have been way worse overall.

Not notifying the customers was not a good move however.