Something nice is also the fact that the people impacted by the breach must be told 72 hours max after the company is aware of the hack.