Monster.Com Breach: Evolution of a Disclosure Letter
When Monster.com suffered a data breach last year, two disclosure letters went out to customers -- one from Monster itself and another from US AJOBS, a federal employment organization that relied on Monster.com databases for its job listings. Though they covered the same breach, each letter was starkly different.
Whatever the case may be, it's clear that writing disclosure letters remains a tough task, as opinion will always vary on the necessary amount of detail and bedside manner. Industry experts do agree on one thing: Companies have to state clearly the steps taken to address the problem and protect customers who may have been affected.
To that end, Monster's latest letter urges customers to take steps to protect themselves.
"In order to help assure the security of your information, you may soon be required to change your password upon logging onto the site. Please follow the instructions on the site. We would also recommend you proactively change your password yourself as an added precaution."
For more on how companies (and consumers) should handle a disclosure, including an interative guide to all state laws, see CSOonline.com's Complete Guide to Security Breach Disclosure.
Monster Worldwide
Receive the latest security news as it breaks.
