A data leak is not the same as a security vulnerability. The data leaks refer to organisations having customer data which is hacked. They have to report this. This doesn't cover finding a leak in Flash.