IMO the author of the article should lawyer up.

They should not have done any of this in the first place, let alone disclose it publicly in this manner.

I too did similar things when I was younger, riding high on that feeling of power, and learned the hard way that even attempting to hack something can be considered computer fraud in EU.

I was lucky to not suffer any consequences in the long run.

You can brag all you want about being an "ethical hacker", the law is probablycnot on your side - especially if you publish incriminating evidence in the form of an immature post like this.