All service I have ever had, has a limit and a notification built in. I can set it to tell me if I'm at the limit. It also removes service if I hit a set point.

Somewhere Mike's service provider should have shut down the site, or offered Mike more control on HIS web pages.

I guess the only other thing would be, if Mike's site had someone linking to a picture, and then emailed the link to 100,000 people and spammed it out to 10,000 BBs.

Sounds like a DoS attack or an error. But the service provider should have limits built and choices built in.

Something wrong with them sending you a $1400 bill, without notice or any control on your part.