[jonh1]

Hi there-

My name is Jon and I’m a Technical Program Manager for HackerOne. HackerOne has a free, voluntary service called Disclosure Assistance. The way Disclosure Assistance works is that we take the vulnerability details you submit and attempt to contact the organization on your behalf. We have a wide range of tools and contacts within the industry that enable us to find the relevant contacts.

HackerOne will attempt to contact the affected organization and verify the identity of an appropriate point of contact to receive the vulnerability information. Once their identity is verified, an email is sent to the point of contact with a secret link to the contents of the bug report and the interactions between the hacker and HackerOne. At this point, the vulnerability information has been successfully shared with the affected organization.

We have helped hundreds of researchers responsibly report security issues, and would be happy to help in this instance as well. I want to reiterate that this is a free, voluntary service. You can read more about it and submit a report here: https://hackerone.com/disclosure-assistance