Quote:
Originally Posted by RuthB
No, we are simply upgrading our login security to a better system. Thanks for your concern, but everything is fine.  |
I'm sorry but anyone with half a brain and who knows anything at all about security knows this is bullshit.
You do not take your system down for 'scheduled maintenance/upgrades' that haven't been previously scheduled. If this were really the case, your clients would have had at
least a weeks notice, if not more.
Companies who are simply upgrading their security do NOT manually reset all of their clients' passwords. And they certainly do NOT email them in plain text. Especially considering you are a financial institution so to speak.
So please, just come out with it so people know what to expect when trusting their funds with your company. Your shit was compromised, and your clients have a right to know the truth. Lying about it here only makes people (who know better) distrust you.