[Full-Disclosure] SPAM, credit card numbers, what would you do?

[Cael Abal]

> And as you can probably guess, orders.txt contains --
> ORDERS. Names, addresses, phone numbers, and CREDIT
> CARD NUMBERS. Dozens of them.
> 
> So I got to thinking... what should I do here?

My suggestion?  Speak with a lawyer.

A number of 'hackers' recently in the news did their 'hacking' via web
browsers -- just like you.  It could likely be successfully argued by a
prosecutor that you intentionally stole this credit card data.  Yes, I
know it was a via clickable link and the site was ridiculously
unsecured, but that probably wouldn't make a difference to a court.

Anyhow, take care and good luck.

Cael