That guy actually accessed, downloaded, and leaked the confidential information--which is using the vulnerability, as opposed to simply doing theoretical research, which is what I was asking.