The team sent out 4,300 disclosure emails to over 600 organisations, but only 9% bothered to reply.
[…]
Eventually, the team reached a 97% remediation rate, but only after going directly to the authorities that issue the certificates.

Why you data leaks, they don’t bother.