Note the timeline says this occurred in early 2018. The $7.5k is the reward, the bug itself was with Google Cloud API management and could theoretically allow users to enable billable APIs without enabling billing, or to access private APIs or to disable APIs for third-party projects.