"Spectacular announcements about massive data security breaches do the public little good. "

Seems to be the attitude here in Canada as I can't remember the last time a 'data security breach' received wide coverage and like Steve (We need a disclosure law for the UK) I can't believe they aren't happening on a regular basis.

Why should every one be announced, Benjamin? Because the only way to keep pressure on the bastards to secure information is to constantly wave the threat of embarrassment and possible loss of business as people lose faith.

Actually I don't really think they're capable of being embarrassed so 'loss of business' is probably the only real threat.