TLDR: Talk to a lawyer. Also: https://www.eff.org/issues/coders/vulnerability-reporting-faq https://www.eff.org/issues/coders/vulnerability-reporting-fa... --

TLDR: Talk to a lawyer. Also: https://www.eff.org/issues/coders/vulnerability-reporting-faq https://www.eff.org/issues/coders/vulnerability-reporting-fa... -- It depends on whether they already know who you are. If you've managed to remain completely anonymous, you can pressure them much easier since they can't retaliate with legal repercussions. If they know who you are especially, but generally as well, i recommend talking to a lawyer. Edit: Removed bit about phone/email. Good point. vvvv