Comment by notpublic

What is the proper way to disclose evidence for this class of hacking?