Yes, I meant to say they can claim it's licensed to then as long as they follow all the license terms. Also IANAL but I believe they can make the claim that th

Yes, I meant to say they can claim it's licensed to then as long as they follow all the license terms. Also IANAL but I believe they can make the claim that they are not violating the license terms since the site was not meant to be publicly available and the access that some people obtained was not authorized (and I think this is a strong argument since they blocked the access as soon as it was discovered). One can say that the mere fact that the site was accessible, even if unintentional, was enough to configure it to be distributed, and therefore required to follow the full license terms (in fact, I think this is the position that GNU takes), but I don't think this argument would be so strong in an actual legal battle,