Yes, it's illegal! What he did differed from what he presented to the IRB.

It's discussed at the bottom of the first page of the Psychology Today entry. And the first and second authors claim they had no knowledge of his follow up exam activities. WTF?! How can you be a first author and not know the content of your own paper?