A cryptocurrency startup, which leaked the personal data of its Initial Coin Offering (ICO) investors, allegedly reported the anonymous person who found the bug to the police. The startup acknowledged that personal data including passport photos may have been accessed by other registered users. "As a thank you for reporting the [vulnerability] I got a police investigation," the person claimed.