The information that is not included in a breach notification is typically articles and other media reporting the breach.
What is included in a breach notification:
- Description of what happened and the date/time of the breach.
- Types of data compromised and affected individuals.
- Likely consequences of the breach.
- Measures taken or proposed to mitigate the breach.
- Contact information for inquiries or assistance.
What is not included:
- Reports or information about articles and media coverage of the breach are generally not part of the breach notification itself.
This distinction is important because breach notifications focus on informing affected individuals and authorities with relevant and actionable information, not on media coverage of the incident.