I received an email yesterday from Pluxee, a popular meal voucher provider in Belgium. It's in Dutch, but let me translate it for you:

Dear Pluxee customer, unfortunately we got hacked.

They then continue with a subtle brag:

Thanks to quick detection, we could immediately secure the hacked systems

Only to then follow up with:

oh your name, email, and phone number might also be stolen, SORRY 🤡

Just one piece of advice: if your system ever gets hacked, do not brag about how quickly you were able to detect and secure your systems. Any security improvement applied after a breach is too late. There is nothing to be proud of, and any company in this situation would do well to be humble and honest. Tell me what leaked, tell me you're sorry and how you've learned. Do not brag.

One this is certain: my data was in the breach because I received my first spam newsletter signup email this morning. Thanks, Pluxee.