They responded very unprofessionally, but at least they are acknowledging the incident and explaining their side. It's almost exactly what I would do as an indi

They responded very unprofessionally, but at least they are acknowledging the incident and explaining their side. It's almost exactly what I would do as an individual, but for a company they should have left it at "we cannot discuss the details of your friends account".