For what it's worth, if you have Ghostery installed you cannot see the comments. The intent is to block tracking but the added benefit of not seeing comments is a nice plus.
The article and comments are intense. The most likely scenario is that this 19 year old tested the Heartbleed vulnerability on the CRA and obtained SSN throught the exploit. I doubt the intention was to "steal" them or use them for criminal motive.