This seems like a journalistic nightmare.

The original article[0] seems perfectly fine. But, if "Adam" (original informant) and Sharp are the same person[1] and Sharp is in fact the person who perform the breach such that this is an inside job instead of an external hack.

IANAL and while I'm not sure of the merit to this lawsuit itself, there's still a lot of problems if your informant is the person performing the illegal activity.

[0] https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-b...

[1] https://krebsonsecurity.com/2021/12/ubiquiti-developer-charg...