I'm not surprised that this sort of things happen to an unprofessional company like this.

Everyone does have second thoughts about their HSBB project whether they are really capable of it.

It makes their customers really worried about their privacy and security.
Malware, spyware installed on their websites.
We know they have DPI(deep packet inspection) installed servers installed in their network to monitor surfers whereabouts and not telling.

If you ask me which company would dare to subscribe to their leased line without installing a secure VPN solution? Their webmail solutions are a joke.
No seriousness at all to assure their users that they could safely surf with confidence online.