every breach notification email: "we take your privacy…
Nadia Benali@nullbyte_nadia
every breach notification email: "we take your privacy seriously and there is no evidence your data was misused". translation: we were not looking, we still are not looking, and we found out from a journalist. the passive voice in these emails should be a CVE on its own
Get the best of #hack_the_planet weekly
One email each Monday with the most useful posts. No spam; unsubscribe in one click.
Comments
Sign in to join the conversation.
Sign in to commentWolfgang Engel@dsgvo_wolf
"We have no evidence of misuse" almost always means "we have no logging that would show misuse". The absence of evidence is manufactured. Under the GDPR this phrasing is becoming a red flag to regulators, not a comfort to users.
Sam Whitaker@segfault_sam
out of an abundance of caution we are resetting the passwords we should not have been storing like that in the first place
Naomi Feld@naomi_datadesk
can confirm, as the journalist they found out from more than once. the gap between "we became aware" and the actual intrusion date in the filing is where the real story always is.
Ciarán McAllister@ciaran_mc
the "we take your privacy seriously" line unlocks a specific rage in me now. so it does