I actually think a permaban isn't enough. I'd like to see SE use the full might of their legal team on that person. If they're able to access normally inaccessible materials from the game then what other data is being accessed nefariously - IP addresses, account details (settings), private messages?

There's always some who take it to the extreme & ruin it.