As for who did it I really don't know but it could've been anyone because this is an XSS that has been used and a matter of public record. All it would take is someone realizing it still worked.

smart boy