They probably did something illegal in order to get that far and know enough information to file the report. That they were doing it for good instead of evil i

They probably did something illegal in order to get that far and know enough information to file the report. That they were doing it for good instead of evil is nice and all, but it's not that far to decide to start doing it for your own benefit. (Remember that there are laws against unauthorized access to computer systems.) Scenario: College kid is upset that the admins have hidden the games on the college network. Kid snoops and finds that he can open other sections by changing a number. Kid changes the number a lot, and before he finds the games, he finds all the test questions and answers to the entire nursing program's exams. Kid was only slightly tempted to do something with that info for profit. Kid did nothing and walked away. But that temptation was there, and it could have gone the other way. That's the precipice of cyber-crime. That is a true story, BTW.