This part of that article is concerning:

> After the site broke the story, Google confirmed the engineer had been sacked in July after his actions were reported to the company via email.

Sounds like he was only fired after one of the victims reported him.