I posted this downstream, but it's happened and there weren't charges filed.
http://www.pcworld.com/article/3155990/security/stock-tankin...
http://www.pcworld.com/article/3155990/security/stock-tankin...
I don't have a problem with MedSec making money by shorting St. Jude's stock (that seems to align incentives to take care of security issues as early as possible). But if MedSec publicly disclosed specific, exploitable vulnerabilities (I'm not sure about specifics from the article), they shouldn't be able to hide behind the "doing what is best for the consumer" argument. It's definitely a clever business hack, and that's alright, but the fake sense of moral superiority isn't.