If, for example, the screenshots didn't actually look like their internal admin interface (and so were obviously doctored), they would probably say something to

If, for example, the screenshots didn't actually look like their internal admin interface (and so were obviously doctored), they would probably say something to that effect in the initial post. The fact that they're merely "looking into it" implies the information they have so far makes them think this at least could be a real hack.