This makes these new accounts even more susceptible to criminal activity. Who pays the charge then? Numerous companies are already unwittingly victims of malicious zombie attacks sending out spam without their knowledge.
What this case highlights is the need for organizations with strong brand reputations to protect and become more vigilant against this sort of malicious activity.