So...where's the responsible disclosure here? A file of apparently breached account credentials was found, has been taken out of public access but was likely fr

So...where's the responsible disclosure here? A file of apparently breached account credentials was found, has been taken out of public access but was likely from malware in the first place and spent some time being publicly exposed....so, is who was in it going to be communicated to someone?