These guys get better PR by their reputation. They know what clients they want, so they can target them directly. Buzzfeed giving them positive PR is almost negligible in its impact.

Meanwhile, if it came out that they leaked a pen test report, it would literally destroy their company. All their current clients would ditch them, they'd get sued into oblivion, and no one would trust the senior people there in the industry ever again. Would be a very dumb suicidal publicity stunt.