What about criminal prosecution? In plenty jurisdictions this is illegal. Wiretaping, unauthorised access, unauthorised decryption, "Hacking", breach of privacy (manybe even copyright infringement; they edited other peoples content without their permission) or something like that is usually prosecuted harshly if it's done by a individual. I hope a company does not get away with it.