I have one other theory as to how some people are getting people's scroll names.
If it's possible to "scrape" forum posts for links, and detect scroll names in that way, it could be one way that troublemakers could operate. It might not even be players here, but "script kiddies" who like to annoy other people, just because they can. And, of course, if there are any "If I can't have it, no one can" people who missed out on clicking a CB or AP critter, that could be a source of spitework. Either way, it's a sad commentary on some individuals' mentality, but that's a whole discussion unto itself.
My suggestion is to think twice about showing a scroll name on dragons' pages. And if you have discovered that your own scroll has been under attack, it might be prudent to take the link out of the forum signature, at least for a while.
I wasn't aware about the inability to add a hidden scroll to a hatchery. I like that feature.
There are some hatchery sites that allow the addition of specific eggs/hatchlings by code, rather than via scroll. So it might still be possible to attempt to viewbomb one specific item on a person's scroll. But without access to the scroll name, a person couldn't attack the entire scroll's worth of eggs/hatchlings.
I'm hoping that the more layers of protection we add against the script kiddies and the sore-loser game players, the less likely it will be for them to do any harm -- and perhaps, the sooner they will become bored and find something else to do besides vandalize other people's hard work.