I think the problem is that he said he’d likely turn to crime again.
If he’d just say “No, this was my last time, I’ll be good now”, he’d be in a different situation. Maybe doing exactly what you said after serving a much more reasonable sentence.
“I was able to get into your admin’s crypto wallet and steal $400,000”
“Holy crap! Good find. Can you document how you did that, and put the money back?”
“Lol, you think you can order Lapsus around? Money’s mine, life lesson: Secure it better. I’m going to leak your home address now.”
Jesus Christ. Companies should be paying this dude to do pen testing
I think the problem is that he said he’d likely turn to crime again.
If he’d just say “No, this was my last time, I’ll be good now”, he’d be in a different situation. Maybe doing exactly what you said after serving a much more reasonable sentence.
Day 3 of pen testing:
“I was able to get into your admin’s crypto wallet and steal $400,000”
“Holy crap! Good find. Can you document how you did that, and put the money back?”
“Lol, you think you can order Lapsus around? Money’s mine, life lesson: Secure it better. I’m going to leak your home address now.”
Some people do not cooperate.