Never attribute to malice that which can be explained by ineptitude. The were using a freaking open ftp server to host private company docs and customer data on. This kind of thing happens with them quite often. Some of the damaging info probably does come from the disgruntled ones, but most is more likely due to poor security practices.