4 ms·

That's standard practice [1]. When it comes to disclosing hacks, standard practice is to disclose a limited hack first, then when the hoopla dies down, disclos

• Veserv 3y ago
  You only have to disclose what you have definitively discovered, not what you have definitively ruled out. Think how your customers would react if they were hacked and harmed. It is paramount that you err on the side of caution otherwise your bank account might be negatively impacted if your customers exercise due caution and react appropriately to the news. Just remember the slogan: “My money is more important than your safety.”