Timeline for How do I inform a company I found a leaked database of theirs on the Internet?
Current License: CC BY-SA 4.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 28, 2020 at 8:21 | comment | added | Pedro | Yes, they would. I am a but cynical because I see this happening frequently. Most orgs still don't understand disclosure, aren't ready and often don't use the information provided in the way that benefits them the most. | |
| May 28, 2020 at 7:58 | comment | added | Jörg W Mittag | @Pedro: Worst-case, the OP now has two issues they can talk to the company about. Leaking data, and not having a person handling that leak. | |
| May 27, 2020 at 11:18 | vote | accept | Arkest Must | ||
| May 27, 2020 at 11:18 | |||||
| May 27, 2020 at 11:17 | comment | added | Pedro | @David yes they must and they should but they don't always do. | |
| May 26, 2020 at 23:16 | comment | added | David | All companies subject to GDPR who process personal data now need a Data Protection Officer (DPO). This might be a good person to speak with. | |
| May 26, 2020 at 19:02 | comment | added | bta | Sometimes, you might have luck looking up the company on Linkedin and trying to find someone with a relevant job title. GDPR means many more companies now have people/managers dedicated to data protection and security. | |
| May 26, 2020 at 10:00 | history | answered | Pedro | CC BY-SA 4.0 |