Quote Originally Posted by Amundir View Post
I would be highly surprised if this were true. Not reporting such a known incident surely would open them up to a class action suit.

Edit: Actually that may not be true. They may not be required to inform there customers of data breaches if they can be sure that the data lost did not include credit card information. Dunno, who of us is an actual lawyer,
Your edit is correct. The data breach only needs to be reported if the information breached meets certain criteria. Sorry, but I don't remember what the criteria is.