Real or not, that's a lesson for everybody trusting the encryption done by an external entity on which you have no control, as in this case mega - sensitive stuff should land on whatever cloud service is, already encrypted
Nothing is secured, They all lie. File sharing sites can read your files, VPN providers know your IP, IMs know what are you chatting. Nobody's stands to their words. :)