Stop being dramatic. Most companies appreciate white hats. OP didn't divulge the exploit and is being responsible.

OP has already contacted them once. If they want, one thing all lawyers are competent at is digging out info.