The fact that this occurred 5 weeks ago yet nothing has been done to rectify this and that the co-founder wanted the victim to put a spin on the situation is astounding.
That's what I keep thinking too. Ignoring all the ethical and legal issues here: this was just obviously a huge risk to the company from the instant they heard about it. How do you let weeks go by without getting closure on this? Get the senior executives on the phone with her every day, make sure she knows everything you know, make absolutelycertain she isn't stewing in silence thinking about writing a blog post. Really, that's just customer service 101.
Instead AirBnB stuck their heads in the sand and ignored it until it went viral. Bad, bad sign. Which new company-breaking disaster is going to be ignored next?