The feeling when a small hobby non-profit project gets hacked and the owners quickly respond to the users and say “hey, we got hacked but don’t worry, your passwords are safe because they were encrypted!!”
But a damn multi-billion company gets hacked, takes months to tell the users and their answer is: “so… a few months ago, we got hacked, but it wasn’t that bad so we didn’t think about telling you until someone found our database for sale in a forum. Also, change your passwords, email, physical adress, bank account, credit cards and if you sent it to us, your SSN, because we didn’t think it was important so it was all stored in a plain wordpad file without any encryption”.
I know this must have been awful for you guys, but damn if it feels good to know that even if the fucker got access to your database, they couldn’t do shit because you were competent and took measures to protect your users in a way a multi-billion company doesn’t.
No, the difference is that blahaj encrypts user passwords while a multi-billion dollar company stores them in a fucking plaintext file (alongside the credit card numbers and other sensitive data).
Also, under GDPR, a company must inform of a databreach ASAP, and they only do when they get caught.