I was looking for some help on an issue I was facing and I accidentally stumbled upon a service from another company which was exposed to the public internet.

This service allowed exporting the raw configuration, API keys, usernames, passwords, urls, etc. D:

I tried to find a contact to reach out to, but I wasn't able to find anything on their site. The contact on their site is only for sales and press, of which I want neither.

How would you handle this situation?