Dear Sir: Your Credit Card Number Has Been Owned

An anonymous reader submits: "California has become the first state in the nation to require companies victimized by malicious computer attacks to disclose what might have been compromised to their customers. Dubbed the Security Breach Information Act, companies whose systems are cracked and have credit card, bank account, and/or other significant customer data stolen are required to report the intrusion either by email, snail mail, a notice on their website, or by notification to the news media. Law takes effect Tuesday, July 1 (tomorrow)."

Comments

"Update:"

[shawnywany]

"All your base is now belong to them."

MS Bank v1.1

[Anonymous Coward]

for i in `select * from users`; do
/usr/sbin/sendmail $i.email < sorry.txt
done

Re:MS Bank v1.1

[Anonymous Coward]

apparently MS Bank runs on unix. in a bash shell...

right... sher...

Security Breach

[Anonymous Coward]

"Umm, I would send out notices, but it appears that the crackers overwrote the mailing addresses of our entire userbase with 123 Sesame Street."

I can just see the conversation on 1337 IRC chans

[Pento]

(Translated to English, for readability purposes only.)

1337 h4xxor> The company I broke into published it in the morning newspaper!!!1!1!
5kr1p7 k1dd13> That's nothing!1!! I made the evening news!11!!!1!1

Correction: 0wnx0r3d

[dupper]

Aha, spelling Nazis, now the shoe is on the other foot!

What's worse?

[MoeMoe]

companies whose systems are cracked...are required to report the intrusion either by email, snail mail, a notice on their website, or by notification to the news media.

Now I'm not sure what I should be more afraid to find in my email, this or spam....

I'm curious...

[mabu]

Do you think that a little "This site powered by Windows 2000" icon on the bottom of the page be considered appropriate notification?

BUSINESS PLAN

[goon america]

This is just an attempt to sell Microsoft a lot of stamps.