Comment by ryandrake

> Right now, they publish a press release, go 'oopsie poopsie', maybe have to pay for some anit-fraud things from equifax if someone asks, and call it day.

Don't forget the usual Press Release starting with "At [Company], we take security very seriously..."