Knowing what we know about these companies and their security practices, I would give benefit of doubt to this "someone" who posted on a hacking forum.