no real damage done just small inconvenience. and he exposed bandais bad security. if a 15 year old with chatgpt (not even claude or glm) can get write access to all your users accounts you are the one who should get investigated.