I reported a vulnerability at work when I found out I could make transactions on our system look like someone else made them.

No reply for 6 months, then, when I was in a new department they asked if it was still a problem. I told them I do not think it was fixed but I don’t work there anymore so they closed out the ticket.

🙃