Getting hacked is bad enough. Not telling your users is unforgivable.

Read more in my article on the Hot for Security blog.