Chris got lucky - he is lucky he is not under criminal investigation for hacking or even spying. It is a sad fact that all too often the people who bring attention to data breaches and security issues, get targeted and accused of hacking. The people involved do not want to admit they are at fault, so try to justify this by saying the whistle-blower &#x2F; good Samaritan are criminally accessing the data.<p>If one discovers a security issue or data breach, it is best to either do nothing, or at most raise the issue very anonymously.