"No evidence the data was misused"
The next time you read a statement that a breached entity has found no evidence of data misuse, remember this: data may have been misused even though entities are unaware of it.
Tim Wilson of Dark Reading provides a current example of why entities should inform customers, this one involving the T-Mobile breach that affected 17 million customers. The company found no evidence of data misuse and based on the recovery of the device and their own investigation, never informed the customers in 2006. But…
For the rest, you’ll have to click over to PogoWasRight [link to http://www.pogowasright.org/article.php?story=20081006143220242 no longer works].
Oh no, not confirmation bias again!?
So how highly motivated is the breached entity to search for evidence? No, I thought not.