The policy clarification stated that participants cannot make threats, use extortion, or access customer data beyond what is accidental or occurs in good faith.

Coinbase, Uber, HackersRead More

You might also be interested in reading Calling your boss a dickhead is not a sackable offence, tribunal rules.