Firm calls cops on researcher for responsibly disclosing data leak