I found a Vulnerability. They found a Lawyer.
dixken.de
What happens when you responsibly disclose a critical vulnerability exposing personal data - including that of minors - and the organization responds with legal threats instead of a thank you?