Perhaps someone wasn't following the bug bounty rules?