>The look on that nigger's face >>that's the same face when asked about having breakfast all kidding aside - there's even a quote that some of the data exfil'd could possible be duplicative - while this doesn't mean anything, they're trying to skirt whatever they can. The only thing they have going for them right now is if any data-at-rest was encrypted, it's not typically considered a disclosure (spill) - unauthorized or other. And i keep hearing the same mitigations - change your passwords (best practice) and enable two-factor authentication (2FA) which all the rage is these days; using an OOB mechanism - such as email or phone text, so if your email and pass/phone number were part of that exfil how good is the OOB mechanism gonna work for ya.