My university has one exposed to the internet, and it's still not patched. Everyone is on holiday and I have no idea who to contact.
"Look at me. I'm the DBA now"
-JS devs after "Signing In With Facebook" to MongoDB Atlas
AKA me
Sorry guys, I broke it
No one, if you aren't in the administration's good graces and something shitty happens unrelated to you, you've put a target on your back to be suspect #1.