Well to add to that ...

- tcg mounts are being duped like fuck (same with gems, death chargers,... ) for months
- 90%+ of people in EU who'll get hero of the alliance/horde bought it from the russians, who advertise for months on end with the same toons in trade, who simply use an exploit where they can queue vs whoever they want (same happens in arena btw)
- the biggest AH sellers on the busy realms in EU are bots. not something I suspect but something they admitted cq which I can prove. reporting is to no avail as warden can't detect it (i'm not talking about a few, but 20 who sell day/night on kazzak).
- gametime is being sold for only a few k gold, by using a flaw in the recruit a friend, this is going on for half a year if not longer
- all in a sudden people can buy 'unmerged bnet accounts' for ingame gold with a lvl 80, which can be merged with your own account and you are entitled to the scroll of rez
... and the list goes on.

So why doesn't that breach surprise me at all.