[Chardok]

I'm sure it does. Even if I already was a BoA customer in this theoretical scenario, I would also prefer to be in the know to avoid that specific POS/gas station company until the issue was resolved, instead of wondering why my identity was stolen and dealing with the fallout with my bank unknowingly to blame.

[tptacek]

You'd be in the know about one random thing, but there will be dozens of others, many of them also known to different subsets of people.

I'm not making an argument about the public policy of disclosure. My view is: if you come about the information lawfully, publish whenever you're ready.