@lauren My vague take on this kind of thing is "When a company behaves that badly, they're going to get some parts hacktivism and some parts opportunists smelling blood in the water, and maybe the difference doesn't matter."
I'm aware of some of the tactics attackers used against Google back in the day. I don't doubt they still do it, and I don't doubt that, for example, when things started to go off the rails at Twitter that the black and white hats (and every shade of grey in between) started dusting off their pen-testers and redirecting their botnets.