I'd bet good money that this was one engineer with Charles or Burb MITMing their phone to get details on the GoCatch API, then scraping it with a python script.

It's the cyber equivalent of walking into a business and writing down the names on the name tags.

Complaining about stuff like this gives Australian companies a bad name.