I give Krebs a little credit here because the "whistleblower" from his original article was really an insider that was part of the investigation into the breach. Obviously this source was also the hacker, but knowing that was impossible.

Now, I believe Krebs should at least acknowledge he made this mistake, sadly he hasn't here yet.