Businesses must now notify customers of possible identity thefts

Even if a business is not legally required to disclose a security breach, consider whether customer relations or other factors weigh in favor of letting your customers know