To me this is a legal issue between Caplinger and the guy who social engineered access to his account, assuming it happened. The DPA said the payment link was not intentionally broken, so I'm not sure how it's financial damage vs just a delay in processing credit cards. I have web shopping cart issues all the time, a few days of no credit card doesn't seem like high treason to me but I'm not a lawyer. I still think this is an issue you figure out and then report on after you have facts. Delta already knows who was laying over at the hotel and has probably already got a list based on the last update. I'd also have to guess that the hotel has video surveillance in the coffee shop. Short list of guys to look at. Could have waited a few days to send out 5 updates that say nothing but ask for more money.