After discovering a security problem, the speaker went to great lengths to report it responsibly and sought legal help to get answers. Although it was legal for the reporter to access the information, it may not be legal for someone with malicious intent to do so, risking exposure of personal information.