Common knowledge then... I think Danny and co. should post an announcement, however embarassing, about what has happened.
Skycop - I'm sure you're right about possible penalties but as an ex-IT professional, I can assure you the authorities won't give a damn about a non-intrusive crack that hasn't cost anyone a penny in lost revenue.
If it is a hack/crack on a US server, a crime has not been committed unless there has been a financial loss to the victim of more than $5000. Source -
http://www.grc.com (see the fascinating article on Denial of Service attacks and the American authorities' response !)
If the hacker is under-age, then all they could possibly get is a sound ticking off - the potential damage to people's careers is mind-boggling if the details get out to the wrong people. Or the details are paid for...
So now anyone with 'the list' can post anything they like under anyone's username. Great. At least when the lawsuit arrives I can happily say it wasn't me who did the posting !
This needs to be sorted out gents.