The whole key to this kerfuffle is the identity of the hacker.

Is he now or has he ever been a "DALPA guy"?

If the answer is yes --- heads need to roll.