Wait, what? A security researcher listed data they'd stolen through a security exploit on the dark web so they could bring it to your attention? Am I the only

Wait, what? A security researcher listed data they'd stolen through a security exploit on the dark web so they could bring it to your attention? Am I the only one thinking this seems incredibly questionable on an ethical level? What would he have done if you hadn't seen the data was for sale? Sold it to blackhats to exploit? Or spammers to take advantage of? That seems like the 'researcher' was being a real sleazebag here. Forget ethical disclosure, this person is clearly going to be sued at one point or another with those sorts of practices. Either way, sorry you went through this. Hope you learnt how to improve your security for the future after this debacle too.