“The white hat hackers should be guarding security, but they were abused as black hat hackers against users,” said one critic.