When they're spinning it [1] as a PR opportunity with no mention of the breach there won't be a bounty.

[1]: https://news.ycombinator.com/item?id=44954242