▲ 1 r/bugbounty
Questioning about an "internal duplication"
Found a bug that leaks full New Relic logs, including PII, API keys, and users' private conversations. Submitted 10/2025, they said that they have an internal ticket. Still working today, even on the prod env (it was on staging).
What should I do? Move on or try to reach users (who may not fully understand the situation)?
u/Adventurous_Ad_294 — 1 day ago