California's SB 1386 does not seem to apply, as there is no "Personal Information" in the leaked database. One thing open to interpretation would be whether t

California's SB 1386 does not seem to apply, as there is no "Personal Information" in the leaked database. One thing open to interpretation would be whether the password in the file could be used to access someone's bank account. If someone uses the same e-mail address and password at both sites, that would be true. Section 1798.29, E, 3 -- Definition of Personal Information Account number, credit or debit card number, in combination with any required security code, access code, or password that would permit access to an individual's financial account. * http://info.sen.ca.gov/pub/01-02/bill/sen/sb_1351-1400/sb_1386_bill_20020926_chaptered.html http://info.sen.ca.gov/pub/01-02/bill/sen/sb_1351-1400/sb_13... I am not a lawyer.