~2008,~15. I was interested in building websites and after my curiosity getting the better of me, I ended up playing with SQL injection. Instead playing with m

~2008,~15. I was interested in building websites and after my curiosity getting the better of me, I ended up playing with SQL injection. Instead playing with my own websites, I thought it would be more fun to find the same vulnerabilities in other sites. You can imagine my excitement and disbelief when one of the largest online DVD retailers in the world ended up spitting out over 600,000 records complete with SSN, full name, address, credit card number/expiry/CVV, email. Among these records I found the information of a certain female CEO of the world's 2nd largest food and beverage company (or someone pretending to be her). Of course, about 70% of these were expired, but I was just curious. I had no intent to use them (okay maybe a little itch). My excitement quickly turned into fear as I realized the legal implications of such a feat. And against my better judgement, I contacted the company and let them know about the vulnerability. Fortunately, after warning me that they would use the law to its full extent in punishing me if they ever found those records leaked/used, they left me alone. Around that same time I also compromised various government departments of South Asian countries (think Indonesia, Malaysia, etc). But they never replied when I notified them. Still scares me to this day.