I don't see anything in this article that warrants its title. Sure this company didn't properly protect cameras which allowed unauthorized access to live feeds in all kinds of places, and that's definitely bad. And yes some of their cameras seem to be equipped with face/object detection and a few basic classifications, but detection is not recognition, and any IP camera feed with a decent enough resolution can be used to perform facial recognition further upstream. There's nothing anywhere in that article that implies any individual was ever identified. Staggering Scale of Facial Recognition? Hardly.