> based in France (as am I) The laws in France seem a bit better as far as “unauthorised access” is concerned, I haven’t heard of any precedents where security

> based in France (as am I) The laws in France seem a bit better as far as “unauthorised access” is concerned, I haven’t heard of any precedents where security researchers have been prosecuted there. In any case, I’d recommend disclosing it anonymously over Tor (do they have a contact form? If so just fill it in using the Tor Browser).