I was in a similar position once, many years ago, in the early days of the web. I had managed to get parts of the source code to a popular online game (no real hacking here, they left a tarball in an open directory I stumbled upon), and being a foolish young kid, I decided to brag about my insider knowledge of unfinished features on a website. A few weeks later, the company contacted me with a job offer... they just needed my name and address to start sending me checks. Fortunately, I wasn't that dumb.