Bad publicity better than no publicity
Jun. 8th, 2012 07:16 pmWhat to do with users who are not using their accounts? Sure they require gentle prodding, to lure them back to at least update their profile and (pleeeeease!) have a fresh look at the old and new services.
If for this noble goal you are willing to put a small dent on your Co. reputation, then go ahead:
"We recently became aware that some [Co. name here] passwords were compromised and posted on a hacker website. We immediately launched an investigation and we have reason to believe that your password was included in the post.
To the best of our knowledge, no email logins associated with the passwords have been published, nor have we received any verified reports of unauthorized access to any member’s account as a result of this event. While a small subset of the passwords was decoded and published, we do not believe yours was among them.
The security of your account is very important to us at [Co. name here]. As a precaution, we disabled your password, and advise you to take the following steps to reset it."
If for this noble goal you are willing to put a small dent on your Co. reputation, then go ahead:
"We recently became aware that some [Co. name here] passwords were compromised and posted on a hacker website. We immediately launched an investigation and we have reason to believe that your password was included in the post.
To the best of our knowledge, no email logins associated with the passwords have been published, nor have we received any verified reports of unauthorized access to any member’s account as a result of this event. While a small subset of the passwords was decoded and published, we do not believe yours was among them.
The security of your account is very important to us at [Co. name here]. As a precaution, we disabled your password, and advise you to take the following steps to reset it."