[sroussey]

Also, possibly illegal. If you have a data breach, you must contact your users.

Probably better to use encryption with public / private keys.