Hacking Team has a horrid history of not keeping their word, the Sudan connection for example they explicitly denied, among others. I don't get the shitstorm for the CP strings, even after a cursory look at the files uploaded there is quite a lot of stuff I'm more concerned about :d