Questions of jurisdiction, evidence and costs all suggest otherwise.
This person has been dragged into an expensive American civil case .
She was clearly contactable as the corps had found her yet she was contacted with what any person who has any cybersecurity training would dismiss as a spam email.
The jurisdiction is a place she has never been.
This should case should have been thrown out, instead she got a summary judgement.
In Australia she could automatically be awarded costs at trial. Here she's going to have to counter sue.
And last but perhaps most significantly, it's clearly not her. Sure, we don't hear about any of the ones they knock back, but this shit would not even get close to getting up in a good legal system.