“Do they need to know which websites you have accounts on in order to guide some business decisions? “<p>Clearly that must be the case. They might also also not want to “alert” customers with a prompt to change their iterations as it will make them aware of the breach.<p>Either way pretty sad all around.