Keys posted active credentials to a forum, and those credentials were used by others to deface a website.  Do you regard that as a fair statement of what happened?  Still completely insane to send someone to prison for that.