Post

Companies delaying disclosure of data breaches until they force a majority of users into agreeing to mandatory arbitration clauses has become step 1 for limiting legal damages.

0 reposts11 likes

We don't know for sure that's what happened here, but the timeline looks pretty bad regardless. Fundamentally they should be getting raked anyway for demanding people send government ID scans via email, then not securing that data, and they should be getting raked over the forced arbitration.