security breach notices - how serious do you take them?