LH is also responsible for the integrity of their reservations. Did they adequately identify the id of the person cancelling the ticket? Obviously not. That seems to be a huge security breach on their end. Not only should they have reinstated the ticket, but they should launch a full investigation as well.