In case of hurricanes and other natural disasters most people die later due to lack of water, electricity etc.

In case of Equifax, Yahoo etc it is because they simply lied to not look as bad, but then they need to provide accurate information.

IMO if someone broke to a database it should be considered that all data was accessed and all data should be treated as compromised.

Unless break in was to a subsystem and just that subsystem then all data in it should be considered compromised.

I tend to agree.

Just come out at the start honestly and say, "All 3 billion accounts affected at Yahoo", or whatever.

I feel angry when I see the numbers gradually going up, I think one reason is because I see it like they're trying to dupe us, or "cook the frog slowly".

I understand they have to protect "shock" to their stock price, or reputation, or prevent panic, but honesty is still valuable, right?

When you have a natural disaster, surely there are experts who have already mapped out such situations and they can say, roughly 20,000 homes will be destroyed in an event like this. Wouldn't it be good to start off at a big estimate and then revise down?

I hate to think this is to some extent driven my the media's need to "drip drip" out a story, instead of giving people the truth.