> the timing of this seems to point to state sponsored hacking, no?

what does hack timing have to do with the state? I don't follow your logic at all. I would never make that connection. It's just an insecure website and server, anyone can run their testing suite and have gotten the same info. Why rationalize incompetence with state sponsored?

I'm really about to sell some Q branded coffee mugs to everyone with an email address in this leak, so fckin gullible.