Hacker News Reader

The vulnerability could have been independently discovered. Organizations involved have said that's not unlikely

There is a liability in the USA if their organization was the one leaking, so plausible denial is the legally safe route to take for a company governed by USA regulations.

Reply on news.ycombinator.com