What RSA's SecurID customers really want to know is what specific information regarding SecurID got compromised, and what are the implications for the security

What RSA's SecurID customers really want to know is what specific information regarding SecurID got compromised, and what are the implications for the security of SecurID itself. Which neither RSA's official post[1], nor Gartner's writeup, seems to tell me. (Knowing the details of how RSA got spearphished is interesting, I suppose, but it leaves out the really important bits.) [1] http://blogs.rsa.com/rivner/anatomy-of-an-attack/ http://blogs.rsa.com/rivner/anatomy-of-an-attack/