[ScottBurson]

Seems pretty straightforward to me -- since it's a DoS that doesn't put users' information at risk, just publish it without naming the company.

[huhtenberg]

That's the first sensible and ethical suggestion in this thread.