It's one thing to discover a data leak, it's another to find out from a journalist that your website is leaking customer data.