yeah, i did reach out to them first and told them about it. all they did was change that user's password, and then they just ghosted me