StockX was hacked, exposing millions of customers’ data
&gt; ...The company “robbed their users of the chance to evaluate their exposure” by not informing customers of the breach when it happened...<p>StockX is valued at $1B and aside from their cataclysmic choice of using MD5 + salt as their way of hashing passwords (They obviously don&#x27;t take security seriously) the company failed to inform their customers of this security breach as soon as it happened and left it very late for the customers to change their credentials. I would expect any unicorn valued company to have some form of incident-response system to immediately inform staff of the breach and to instantly reset all user credentials and to notify their users.<p>Instead they didn&#x27;t inform their customers after the breach and now someone is calculating all those MD5 collisions and attacking all accounts with common passwords.<p>In the case of StockX handling this security breach, this is un-professionalism at its finest.