4 ms·
For breaches involving PII like this, I think the default should be to assume everything was stolen, and it be the burden of the company to prove the breach was
by briffle 9y ago
For breaches involving PII like this, I think the default should be to assume everything was stolen, and it be the burden of the company to prove the breach was smaller.