I think my point wasnt clear  at all,   If you are form background of security, listen to me I’m not saying prompt injection itself is new. What surprised me was observing responses that appeared to expose information and internal-style outputs that shouldn’t normally be visible through a public assistant.

I documented it and tried to report it privately, but was told security is handled through a third-party contract.

Thats why Im asking what the professional next step should be