What not to do. Panera Bread totally fumbled its response to a vulnerability report and data leak disclosure this week. The restaurant failed to adhere to best practices, such as maintaining a contact page for security researchers and responding to tips in a timely manner. I conducted a post-mortem on the affair, the introduction of which I've excerpted below.