It's the "naming FBI officicals on FB" bit that gets him the "cyberstalker" tag.
But if you found a route into a system that handles patient information with no security and you told the company about it and they called the FBI maybe you'd be a bit pi**ed off as well?
Don't directly name Law Enforcement Officials.
It's obvious this SW company is clearly very thin skinned and has very poor disclosure handling processes in place. Clearly some PHB can't cope with any level of criticism.