Glad someone agrees with me
If this is true then they need to be stopped immediately. It's one thing to attack a big corporation it's another entirely to steal private information on potentially millsions of innocent people and publish it on the internet.
Again if true, this is them crossing the line into severe criminal activity needing harsh punishment.
Of course there will be people suporting them and saying things like "Yeah, stick it to the man, expose those security failings LOL!!!" but how will they feel when it's their credit card details being used by criminals. I've already had my card details stolen like this three times this year from different reputable companies and had to waste time cancelling and re-issuing my cards.