I found a Vulnerability. They found a Lawyer
Summary
A security researcher reports a vulnerability in a diving insurer's portal involving incremental user IDs and default passwords, detailing responsible disclosure, legal pushback, and remediation. The piece argues for transparent vulnerability disclosure policies and timely notifications under GDPR to protect users, including minors.