Do you have a better source for that?<p>The article just states it, and when a company does that I assume they are just full of hot air.<p>If you have a better primary source I would be interested in seeing what form the breach was in, because I assume that would make it a lot more clear what the scope of the problem is.