Well, they just could have refrained from publishing the exact "hack" at all. Which would have been the right thing to do, making it at least a little bit harde

Well, they just could have refrained from publishing the exact "hack" at all. Which would have been the right thing to do, making it at least a little bit harder for people to find out which CC #s exactly are compromised. They could have stuck with reporting about it, not sharing in spreading it all over the internet.