The Reddit response from Proton: https://www.reddit.com/r/ProtonMail/comments/1nd1nrc/comment...

I’d like more details about the initial CERT contact if anyone knows anything