[Crying Wolf]

A friend of mine from the Czech Republic found a vulnerability in one of the Czech government websites by accident. (I don't know exactly what vuln that it is)
He is wondering what he should do about it.

Should he report the discovery to the government and risk being arrested for accidental cybercrime, but the site will be fixed and others will be safe. He left a trail, so anonymous reporting is not enough.
Or should he just keep quiet and forget about it knowing that a lot of data may be at risk in the future.

Guys what do you think, because I don't know what to suggest to him? This is more of an ethical question I guess...

[mothered]

Should he report the discovery to the government and risk being arrested for accidental cybercrime

Report It anonymously.

[Crying Wolf]

Should he report the discovery to the government and risk being arrested for accidental cybercrime

Report It anonymously.

As I said, an anonymous report is impossible in this case

[mothered]

Should he report the discovery to the government and risk being arrested for accidental cybercrime

Report It anonymously.

As I said, an anonymous report is impossible in this case

Who's to say It was your friend that reported It?

It could be anyone who also compromised It, and decided to report It anonymously.

[spartanhackers]

Hello

We can help.
https://spartan-hackers.site/
You can contact us by e-mail spartans@keemail.me

[Crying Wolf]

Hello

We can help.
https://spartan-hackers.site/
You can contact us by e-mail spartans@keemail.me

I wonder how