That's why the Der Spiegel stories always should have been viewed with nothing but suspicion.
I know for a 100% fact the the hacked emails were offered to a few German outlets but they didn't want to run the risk of legal action.
Der Speigel had previously run a story painting certain Bayern boardroom members in a negative light. Bayern kicked off big time and threatened legal action.
A couple of people at Bayern (miraculously) knew Der Spiegel had the emails and essentially pressured Der Spiegel into running with the story, knowing they had leverage.
What's interesting about all of this is the misinformation that continued to spread, even after the CAS ruling. For example, a few outlets, including the MEN, stated we didn't persue legal action over the claims. This is sort of accurate (as it's notoriously difficult to win libel cases against German Newspapers, despite the 2017 defamation laws) but what wasn't widely shared was that the club most certainly fired shots across the bows of two individual journalists rather than Der Spiegel as an organisation.