> They opted to TELL people about it which is a good indicator. Aren't they based in California which, if I remember correctly, as a law requiring them to noti

> They opted to TELL people about it which is a good indicator. Aren't they based in California which, if I remember correctly, as a law requiring them to notify the victims of a data breach? Would they still have chosen to in the absence of such a law? We'll never know, I guess.