Sometimes the media can help. If you have a contact, they can put pressure on the company by calling them to interview about the vulnerability they are going to write a story on.

Back when I used to read the disclosure lists, I'd see people ask "I need a security contact as XYZ Inc." all the time.