I have been in contact with a journalist who offered to publish the findings in an appropriate manner, however the more I started digging the more I grew concerned over the ramifications of publishing the data. This thread, as well as recent events, motivated me to send a follow up email. My area of expertise is data science and I am looking for advice/mentorship from people experienced in responsible disclosure.
My concern was primarily that license plate numbers are included in the data, which I used to track vehicles across multiple citations. The license plate is also included in the towing dataset as well as the escheatment data published by SFMTA which links license plates to the name of the owner.