4 ms·
Ok, they took responsibility... But they took about a month to notify clients via email and didn't notify the public until Techcrunch inquired for the purposes
by spenvo 9y ago
Ok, they took responsibility... But they took about a month to notify clients via email and didn't notify the public until Techcrunch inquired for the purposes of writing this article. So -1 for not being upfront with end users and clients.
- ajeet_dhaliwal 9y agoTake away a few more for not noticing the problem for nine months.
- snissn 9y agoWould be a good move to put together a common password list and regularly check their data against it.
- perfectstorm 9y agoThey were notified on Jan 5th. They destroyed the stored passwords on the 9th and informed the customers on the 1st of February. It seems reasonable. Why would they inform the end user though ? The end user doesn't even know what Mixpanel is and would be confused if they emailed them directly. Informing the clients (BMW, Samsung etc.) is the right thing to do which they did. I'm sure they had to do a postmortem and make sure a fix is in place before informing the clients and urging them to update the SDK.
- anc84 9y ago> Why would they inform the end user though ? The end user doesn't even know what Mixpanel is and would be confused if they emailed them directly. So that the end users can grasp to which extent their privacy was violated? If a third-party I never heard of, contacted me and told me they got my login details, I would be bloody furious. And that is a good thing if people are enabled to this.