If they were not notified that typically means that their information was not found on a system believe to have been compromised. Why notify every single person who has ever shopped at one of these stores if their PII was never compromised?

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/490/1934#1934