[blantonl]

I wonder if "we discovered suspicious activity on one of our databases" == SQL injection?

I've been through this exercise before with one of my businesses, and I disclosed what/where the injection was and what our mediation was for the problem.

I don't understand the outrage though from this community. I don't think there is a large web business today that hasn't been through an SQL injection compromise. Even the largest platforms in the world like Facebook, etc have had an issue like this crop up.