[Telly]

Many years ago, I accrued a little pension. The company has been sold, resold, sold, and absorbed. The company that holds my little pension now is a Megacorp that I have never worked for.

I got a letter from that Megacorp stating that all my info was on a HR person's laptop, that was stolen from their parked car. The employee had violated company policy about no data to be removed from company premises.

They gave me years of free credit monitoring through Experian.

Megacorp also set up a company website with Q & A's and feedback from employees. The feedback was brutal. Seems that this was not the first time this had happened...

Megacorp decided to go on a crash program to encript ALL megacorp hard drives. Besides instituting more intensive training (I would just beat all HR people with a stick). They also kept up status on the investigation. Eventually, the laptop was recovered, and they used the usual phrase "we have no reason to believe that any personal information was accessed or compromised".

And they canned the employee that violated all the rules.

So far, so good.