Comment by SheinhardtWigCo

Yes, and that's normal. Coordinated disclosure is standard practice when the risk of public disclosure is unacceptable.