3 ms·
It was everybody. The breach was total. No point in assuming anything less.
It was everybody. The breach was total. No point in assuming anything less.
For breaches involving PII like this, I think the default should be to assume everything was stolen, and it be the burden of the company to prove the breach was smaller.
No it wasn't. Nothing changed about the number of affected consumers.