Comment by joshuata

He has written about that very problem here: https://www.troyhunt.com/the-ethics-of-running-a-data-breach...