Reposted by Jack Ververis
The right decision. We can (and should) have discussions about how to responsibly handle disclosure and where 3rd parties fit into the process, but at the end of the day when something this serious comes to light, this is the proper response.
