I just watched a TV show on TCL (I forget the title of it), it talked about a lot of white hackers who were hired by a company to find all the wholes in a network, who would give out passwords, etc. And also about white hats who did like had happeded to you methdeath, so honestly shoudl you be surprised about it... I would say not.

Here's the tricky part, because I agree with tampabay420 though. I mean if this person called you on the phone, told you about it, said this is my name and number and all checked out... then I wouldn't worry so much. But if someone just sends you an email and tells you about it trying to throw you off, hoping that all the IP logs would be deleted before you thought maybe they actually stole something from your company, who knows.

I agree with your logic methdeath, that if they don't cross the line then they are safe. But sometimes how do you know if they crossed it or not, because they told you that you have problems with your security?

Personally I'm a security nut, if someone like that just emailed me and I couldn't trace it back, or couldn't contact them again, then I might think about getting the police involved... JUST to make sure that nothing was stolen.

It's kind of a hard call to make, because you don't want to be an ass for having someone point out mistakes, but you don't want to think that they are being totally up front either.