Hacker News Reader

With the level of opsec described, I'd honestly be surprised if his legal name was Brian Krebs

I think the opsec measures started after his identity was already known.

He certainly could change it, or has.