So month before TCS 10K I sent security bug info to them where I could see details of everyone who is registered. Still seems to be open 1/1