Almost certainly no. If they have a bug bounty program they will pay out through that, but attacking a company of any sort that does not have an open program is a good way to get prosecuted.