Sorry, but is there a better record on this issue?
This article just tries to connect vaguely described events into a story. Very poor journalism, reading this is a waste of time.
Was the vulnerability a dumb mistake or an unexpected exploit? Was it disclosed to the company in advance? How does this case differ from other cases so that there are four lawsuits now and why has everyone been fired? Because they created a bug bounty system that resulted in bug disclosure? Nothing appears to make sense and the journalist doesn't worry at all.