Since you didn't read the article: He didn't hack them (unless performing a Google search and clicking on the link is "hacking" now) and he didn't tell anyone

Since you didn't read the article: He didn't hack them (unless performing a Google search and clicking on the link is "hacking" now) and he didn't tell anyone but LSU about their security problem - until he was attacked for trying to help them out.