> So what was his opsec mistake so that we can learn something from this case?

From the article:

"Anonymously extorting the President and VP as a member of the military is a bad idea, but it’s an even worse idea to harass people who specialize in de-anonymizing cybercriminals"