Legally you must disclose any sort of security breach to your users: http://en.wikipedia.org/wiki/Security_breach_notification_laws http://en.wikipedia.org/wiki

Legally you must disclose any sort of security breach to your users: http://en.wikipedia.org/wiki/Security_breach_notification_laws http://en.wikipedia.org/wiki/Security_breach_notification_la...