What happens to the account holders personal information? Are they going to be sold to the next highest bidder for marketing purposes? They seem to be a company that is just wanting to milk as much as they can from this debacle. I wouldn't be surprised if they did, but of course there would be legal repercussions if they did.
As evidenced by phishing, and failed login attempts... Their database has already been hacked/sold