When a company discovers that sensitive data has been lost or stolen, two of the toughest decisions that it faces immediately are whether and when to let the public—including regulators and customers who might have been affected—know about the loss.
Companies Struggle Over When to Report They’ve Been Hacked
