When you say "Quickly Acted" - How long was our info exposed? When you say "metadata, contact details, username, date of birth, and name" what EXACTLY does that mean? "meta data" and "contact details" could be anything from home address, to phone numbers, email addresses, IP addresses, friends lists, purchase history, and more. When you say "we do not consider that the incident poses a risk to the safety of our users" how, specifically, did you make this determination? Why did it take over 5 weeks to make this announcement? WHERE IS THE EMAIL and FRONT PAGE NOTICE? (many would never know, and many still don't know, about this unless they chose to log in and click around) https://robertsspaceindustries.com/en/Website-Notice Edit: Ongoing press coverage is here https://robertsspaceindustries.com/spectrum/community/SC/forum/3/thread/security-breach-responsible-disclosure-matters/8683658 3/14 UPDATE A support response to a Reddit user also got CIG to admit that IP addresses were also part of the Metatata exposed This new revelation has not been added to the (partial and somewhat obscure) initial notification and no other announcements have been made. https://www.reddit.com/r/starcitizen/comments/1rtquu6/for_those_interested_a_bit_more_detail_from_cig