https://www.securityprivacyrisk.com/mega-breaches-notification-lessons/