This is a really poorly written article. It goes on and on about poor security and how much the credit agencies should not be trusted, but it never says why this disclosure is harmful or why anyone should care.
To say "identify thieves do this" implies "this is harmful" is a post-hoc fallacy.
I mean, I might be generalizing here but I think the target audience for Krebs is usually security minded individuals who probably don't need an explanation as to why having your credit information leaked is bad.
At the beginning of the article he mentions that Telegram channels where attackers discuss methods have been sharing the method, as part of their plans to steal money from people. If the red team wants it, it's probably worth their while.
To say "identify thieves do this" implies "this is harmful" is a post-hoc fallacy.