I'm a security researcher and just discovered a security hole in a website that allows me to download all user data including name,email,phone,and location history.

I've just sent a 90 day disclosure. This market resolves yes if the company fixes the issue before the 90 days is up. Resolves no if they don't fix it before 90 days.

For legal reasons I can't say the name of the company/website just yet.