In what cases does the Criminal Code apply when websites are hacked?

Question

Burglary protection

The bottom line is this: let's say I find an SQL injection (or other important vulnerability) on a site (online store), and I want to make money on it, that is, inform the site about the vulnerability for a fee. Are there any criminal provisions in this case?
PS I do not agree with the store in advance on the search for vulnerabilities and I am not going to use the vulnerability for my own purposes, i.e. just found - reported.
PPS I decided to consult in advance with those who know how to get into something like "cyber extortion".

Answer 1

"The bottom line is this: suppose I find an easily cracked safe in a bank and want to make money on it, I did not agree with the bank."
Yes, there is an article about searching for vulnerabilities without permission - article 272 of the Criminal Code of the Russian Federation, about "agreement" - article 163 of the Criminal Code of the Russian Federation. If you want to make money on vulnerabilities - go to hackerone.com, bugcrowd.com or corporate programs, they always describe on what conditions you can look for vulnerabilities and who pays for it and how much.

Answer 2

And what the hell does it matter to you if you still want everything anonymously and you can’t be found in any way.