[jat1]

You should probably email them first to check that they are aware of the issue or if indeed it is intentional.

If it is, and it is not mentioned in their T+Cs or anywhere on their site so that their customers are aware that their affiliation with the service can be discovered easily by third parties then I would consider it a problem. In this case I think disclosing the company name so that its customers are informed is not an issue but I would not release the tool to get the data.