That is exactly what I was thinking. Sprint should have no problem spending a few thousand dollars while they figure out what is happening. Even if its not their fault, hiring security would be _good_ PR for them.
It would also help their defense when the person pursues damages from them. It's not a question of "if" he will, only a question of when. Perhaps that claim will end up beign against someone other then Sprint... who knows.