[ciex]

The article says the info was released on Thursday, so there's still Friday in between. Maybe someone at that big consumer software company wanted some time to prepare a defense? Maybe law enforcement wants to procure movement in some hacker groups they are tracking, by keeping them from knowing whether they've been busted? Maybe the BSI really doesn't know where the addresses are coming from? There are so many options here.