&gt; Chris decided to report his discovery to the State Department and let them contact their Mexican counterparts in the spirit of cooperation. When he got no meaningful response, he reached out to the State Department’s Office of Mexican Affairs, who told him they would forward his alert up the chain. When that still didn’t achieve the desired results of getting the database secured, Chris contacted the U.S. Secret Service, Department of Homeland Security, and  US-CERT<p>I definitely am all for doing the right thing and I might make a best effort in the same situation, but that&#x27;s pretty gutsy. My overdeveloped sense of paranoia would tell me that contacting these agencies would put me on all sorts of lists I wouldn&#x27;t want to be on. Who knows how easy it is for &quot;There is a data breach&quot; could become &quot;I have your data, meet my demands&quot;.