Under the assumption that the story is true, thing that I cannot assume from a blog post, this should be notified to the authorities more than be posted on HN.
Also notice that before any actual confirmation or official investigation, pointing fingers trying to find companies that match the description could be a criminal offense as well as you could damage the reputation of totally fine companies.