It’s worst-case for their customers. They’re the ones who need to figure out what data to consider compromised.

Microsoft gets a temporary mark on their reputation until their pr and marketing departments make us forget about it. That’s it. Nobody is even going to lose their bonus over this.