The title could be improved. There was no major data breach, unless you consider the researchers that discovered the vulnerability to be perpetrators of a data

The title could be improved. There was no major data breach, unless you consider the researchers that discovered the vulnerability to be perpetrators of a data breach as a result of their research. That is not normally how security research is interpreted. They found a vulnerability, not a breach. The title would be less like click-bait if it simply said: Vulnerability Found in popular Biometrics System allows access to gigabytes of data including unencrypted passwords.