Still trying to get my mind around this one:
Paperghost (the author) just updated me with this:
apparently the pics were placed on the hacked accounts funwall, which of course means anyone would see the pics simply by visiting the profile, instead of having to navigate to the albums
So far, no confirmation or screen shots.
If true, this is very messed up.