That number is actually too high... why, because companies fear that if there is actually happened something serious they file in report, because they have 48 hours to give notice when they first time get indication. There might not been actual data breach, but fear of that.
-
Tämä twiitti ei ole saatavilla.
-
Well you got point there. Most of WP admins collect personal info too much and it makes registry. If they would be smart they would disable user to allow to add such as info. Sadly many of these are not competent to identify data breach and probably also attacker’s are noobs.
Even if there is only name + e-mail address (default required fields for commenting), that's PII already. And it's not unthinkable that it is the sole purpose of a WP breach: harvesting commentators email addresses for spam. And that's a textbook data breach example.
