A few years back I anonymously reported a huge data leak. Weeks later they asked for my name and address so they could "send me a gift".

To this day they still haven't fixed the leak. And I took a pass on that "gift".