I wish I had mod points, I find this funny!

Here in Chile a guy reported the government about a serious bug on their outsourcing website (chilecompra.cl), they ignored him for months, and he made the bug public (you were able to know your competition's offer to the government just by changing a GET parameter).

He was condemned by a court for breaking the law, more info here (spanish)

What kind of action should one take in those cases? Has this happened before in other countries?

Are you using SheepShaver or something else?