, SecurityFocus 2003-09-10
Days before going public with his penetration of the New York Times internal network last year, hacker Adrian Lamo created five new user accounts with the LexisNexis database service under the Times corporate account, which he used to rack up $300,000 in charges over the following three months, a federal complaint in New York charges.

Wckd
Secondly, you don't know if there is a vulnerability unless you exploit it.
Most companies won't take you seriously if you contact them about a problem without proof, and even then there is a good percentage that just couldn't give a dam.
Furt...
[ more ]