I do something similar with businesses using Clickbank as their merchant... I find their leaks on file sharing sites and report it to them and I get paid finders fees....
Anywhere from $50 to $500 (on occasion)
This is essentially the same concept and I know I probably would be able to get businesses to pay anywhere from $50 to $1,000 as well depending how well I pitch them....
I call bullshit, once something has been leaked no company would be stupid enough to try to shut it down. How well you pitch sounds a lot like how well you can scare them, and a good bit will call the fucking feds on you.