When I reported something, and this was probably around 8 years ago, they only had bounties for their equipment, not for "online properties".

I reported a vulnerability in some HR software they owned, but alas I can't even find where it used to live on the internet now.