No, seriously
Somebody — I want to say Rich Mogull, but I cannot find the reference — wrote sarcastically about breach notices almost always saying “At $COMPANY we take security seriously….” as they report how, well…you know.
I just finished scanning 183 notice letters I got from New York, covering the last half of 2006. Using an extremely inelegant hack involving pdftotext and grep, I can report that a mere 35 of the 183 contain the word “seriously”.
Update: In the comments, Rich says it wasn’t him. Dan Gillmor is the leading candidate.
I think you’re thinking of Dan Solove, on privacy policies, not breach notices.
Dan Gillmor’s blog, perhaps?
They Take it Seriously? Oh, Sure
Definitely not Solove.
Gillmor looks like it might have been it (p=.75).
Sorry, wasn’t me. But I remember reading the same thing someplace and wish I wrote it…