In Depth

Monster.com Breach (Again!): Evolution of a Disclosure Letter

Monster.com has been forced to disclose another data security breach. With each incident, the language and tone of the disclosure note has changed. Here's how, and what it means.

By Bill Brenner, Senior Editor

Whatever the case may be, it's clear that writing disclosure letters remains a tough task, as opinion will always vary on the necessary amount of detail and bedside manner. Industry experts do agree on one thing: Companies have to state clearly the steps taken to address the problem and protect customers who may have been affected.

To that end, Monster's latest letter urges customers to take steps to protect themselves.

"In order to help assure the security of your information, you may soon be required to change your password upon logging onto the site. Please follow the instructions on the site. We would also recommend you proactively change your password yourself as an added precaution."

For more on how companies (and consumers) should handle a disclosure, including an interative guide to all state laws, see CSOonline.com's Complete Guide to Security Breach Disclosure.

Other stories by Bill Brenner

• Email
• Print
• Comments
• Digg This
• SlashDot

• Lessons of ChoicePoint, 4 Years Later
• Heartland Data Breach Reflects Lack of Security Progress
• CSO Disclosure Series | The Dos and Don'ts of Disclosure Letters
• CSO Disclosure Series | Data Breach Notification Laws, State By State
• Three Years Undercover With ID Thieves