I really don't like adding to the fire when it's not necessary, but even though the article doesn't state it outright so much as he implies it, Deidara is absolutely the owner of the site the code went out to. It's almost an impossible coincidence that the name on the site WHOIS and the name associated with his Paypal account are one and the same. (Edit: did a deeper whois search and the email address on file also matches his PP)
I wouldn't care so much if he'd just done it once or twice, but it looks as if he's been doing it for years, and on top of it trying to claim it's all bullshit.