Google talks about disclosing 0days - https://security.googleblog.com/2016/10/disclosing-vulnerabilities-to-protect.html

 

Finically regulator loses some records - https://www.engadget.com/2016/10/31/us-comptroller-data-breach/