That&#x27;s what happens when you compromise a site that you don&#x27;t have authorization to test. You always run this risk when performing testing that isn&#x27;t under the umbrella of a formal bug bounty.