Trust Center

At Bloomberg Industry Group, we welcome responsible disclosures of security vulnerabilities found within our websites or applications, in accordance with this policy.

Expectations for Responsible Disclosure:

Confidential Reporting: Please report security vulnerabilities confidentially to SecurityCompliance@bloombergindustry.com

Your disclosure should include:

• Your name and contact information.
• Clear identification of the issue's context, including the name of the vulnerable application, the vulnerable URL, and any exposed parameters.
• A description of the vulnerability, including how it can be exploited and the potential consequences.
• Where possible, please provide a screenshot of the exploited/executed vulnerability.

Non-Disclosure: Do not publicly disclose the vulnerability without our explicit consent and guidance.

For purposes of clarity, our terms governing access to our products and websites do not permit active scanning or penetration testing.

What You Can Expect from us:

• Acknowledgment: The INDG Team will acknowledge receipt and begin investigating the reported vulnerability.
• Investigation Outcome: We may inform you of the investigation's outcome upon its conclusion. During the investigation, we may reach out for additional information.