And if you do finally get through to them, they can still be kinda jerks.
When I briefly was interested in precious metals, I found that a popular gold&silver bullion retailer had a breach, with attacker having customer contact info, and also able to email as the retailer.
This seemed like a situation with higher-stakes risks than the usual applications of consumer data breaches.[1]
So I felt obligated to alert them.
When I talked my way through the company's main phone number, the IT/security people came off as skeptical of me, and kinda doing a tough-guy thing (like they might be dealing with an attacker trying to social them, and didn't want to show weakness or look stupid), before they acknowledged/claimed that they knew about the compromise.
Then, when they realized I was legitimately alerting them, not trying to trick them, nor to otherwise get anything from them, they still sounded like I was a jerk for bothering them about this compromise they already knew about. (Though I don't think they disclosed it to affected customers.)
I suppose I should be understanding, that they might get BS calls all the time, but, even as a ordinary citizen trying to be helpful, the tone was annoying. I guess the FBI would be rolling their eyes even harder at companies that not only can't do their job of securing sensitive data and systems, but then act like jerks when you try to help them salvage the inevitable fudge-up.
[1] This was a vendor to the "if you don't hold it, you don't own it" physical gold&silver buyers fad at the time. If attacker also got the shipping addresses, it's a high-value burglary target list, of homes with high probability of untraceable stores-of-wealth, including ones that could easily be liquidated for (today) around $2,000 per troy ounce. Or the worse variant: target list for home invasion, where badguy threatens/tortures occupants until confident that the victim told them all the hiding locations, not just the decoy safe. Maybe a harder list to sell for that purpose, but more dangerous if it got used for that purpose (rather than, or in addition to, an email scam gold-for-Bitcoin special offer that appeared to be from the retailer and got past spam filters).