Agreed regarding trying to get the information in front of the right people, or even just into the company. Recently been trying to contact 20-30+ companies reg

Agreed regarding trying to get the information in front of the right people, or even just into the company. Recently been trying to contact 20-30+ companies regarding public exposure of private data, and I’ve had a real spectrum of results... Some had a bug bounty/disclosure program, and fixed it within minutes. Some had CERTs... who never acknowledged the email. Some didn’t have any public contact methods, so had to hunt for them via google. Some acknowledged the issue, removed the private data but didn’t fix the actual ‘hole’... On the whole, I spent more time trying to find contacts for websites, than actually finding the issue(s).