Okay, that's fair, but it would be the same point for practical purposes, in my opinion. I don't personally believe that it's necessary for people to get hand-holding to independently verify his individual claims. Certainly other people could copy his methods to reproduce the results, but I'm not sure what the benefit is of links into the individual leaks of sensitive information.
With a fake name there is no proof that the information in question ever existed.
I would've probably masked a name, but institution url should stay there, so anyone could check that the point is valid.