Sued for rattling doors
So, someone was walking down the street rattling doors on storefronts, and found one that had been left unlocked, though there was a "authorized personnel only" sign on it, there was no guard.
She told the company and a few people who have an interest in the company that the door was being left unlocked, then wrote a story about it.
So the company sues her for telling the world that they don't have their door locked? Brilliant business tactics, that.
Oh, and from personal experience, website testing is usually totally automated. All they do is to scan for open ports and what version of various software you have installed, and report potential vulnerabilities. They don't check for bad programming on your site; you could have any number of vulnerabilities in your own website code, they'll never find it. You need a human with some knowledge to take a peek to discover those problems.