HUFFLEPUFF, the thing we've been waiting for months. Well many people did place their guesses how he(EDIT:Some people were even telling "Huflepuff" was a girl) could have done that but confirmed report from PD is better.
We've already told a few people about the specifics so it isn't a total mystery. A lot of people had some good guesses, it isn't a particularly exciting exploit but it definitely isn't something a normal user could have pulled off or known to do.
Given that you've promised several times to publish a report on this, telling us that you've told 'someone' can only serve to piss us off. Why is it such a secret? Why did you break what you've promised publicly?