This is grey-hat at best. Intent may have been good, but the fact is that this team created and distributed software to access and exfiltrate data without permi

This is grey-hat at best. Intent may have been good, but the fact is that this team created and distributed software to access and exfiltrate data without permission which is very illegal. You may want to consult with the legal department before posting about this on a public forum fyi.