The typical advice to contact the users is good public relations advice, but we all need to remember that there are strict data breach notification laws through

The typical advice to contact the users is good public relations advice, but we all need to remember that there are strict data breach notification laws throughout the US (46 different laws in 48 states)[1] and in many countries around the world. If you know you've been breached and suspect personal data has been stolen you need to get yourself a lawyer. These laws are complicated and professional help is definitely warranted. [1]http://www.ncsl.org/issues-research/telecom/security-breach-notification-laws.aspx http://www.ncsl.org/issues-research/telecom/security-breach-...