Druff, any solution whereby they come out and tell more lies is unacceptable. They to take tell the truth, whole truth, nothing but the truth. They need to get rid of anyone and everyone involved in the debacle, refund all parties, and implement sweeping security changes.
Exactly. They may be able to save themselves by coming clean and attempting to assure the public that, as a result of this, their security measures will be tougher than any other site. They cannot save themselves by winking at us with a refund. So the AP fella's notion that they are damned if they do, damned if they don't, is not true. They are damned because of how they handled this from day 1 ... but it may not be too late for them to save themselves with the correct approach.