Texas-based Lookout Services is threatening to press criminal and civil charges against a Minnesota Public Radio reporter for uncovering a security lapse that revealed sensitive data for at least 500 people.

“Lookout Services admits that misconfigurations on its Web site left databases containing names, dates of birth and social security numbers accessible to unauthorized individuals,” writes The Register’s Dan Goodin. “But the company, which verifies the identities of new employees, says MPR and its reporter, Sasha Aslanian, violated criminal statutes when she viewed databases belonging to five of Lookout’s customers.”

“Lookout has already sued the state of Minnesota because one of its employees allegedly leaked details of the vulnerability after learning of it at a company-sponsored webinar,” Goodin writes.

Click here to read the story at The Register.