Not too bad, all things considered
" it discovered on Monday, December 11, that it had been hacked, and alerted the world, er, 10 days later"
Of course it's much better not to be hacked at all, but once that happened, coming clean within 10 days AND offering 12 months credit monitoring is by far the best response I've ever seen to a hack. Most other stories we see on leaked data have the breached company reporting a leak months or even years after the fact.
Biting the hand that feeds IT
