Pardon me I got my jurisdictions mixed up, it's the FTC that would regulate these matters. I'd believe nothing's been staged, but it's quite apparent to me that these security incidents and findings are being spun for marketing.

For example: https://news.ycombinator.com/item?id=49929433