IMO the thing to do hypothetically is email and CC the news desks of the most legitimate newspapers you can think of with a link to the data.
They will all run the story because if one of them will and the rest dont want to miss the train and they will all reach out to the company asking for comment after they document and verify that the data was publicly available.
This wont do anything. oh no, a news story from some also corrupt org. Oh No! a data breach! can I offer you one month of identity monitoring in this trying time?
IMO the thing to do hypothetically is email and CC the news desks of the most legitimate newspapers you can think of with a link to the data.
They will all run the story because if one of them will and the rest dont want to miss the train and they will all reach out to the company asking for comment after they document and verify that the data was publicly available.
Emphasis on anonymously.
I mean how anonymous you need to be depends entirely on how legal the method you found the data is.
This wont do anything. oh no, a news story from some also corrupt org. Oh No! a data breach! can I offer you one month of identity monitoring in this trying time?