"We hope [they] will take this as a wake-up call, and not as a threat."

That's what they all say. Can't they discuss this with the companies in question, instead of hurting people by disclosing their login information?