More Specificity on Threat Notification

[stonevc]

All of the current steps make sense, however, companies could go a bit further when notifying consumers of data breaches. They could, to the best of their knowledge, include who they believe caused the breach, what the breached data could be used for, and how that breached data could negatively affect a user. Consumers often don't even know what data is being collected, let alone how that data could be used maliciously. It is up to the companies to explain the full severity of the breach thoroughly to any affected users.