http://www.cnn.com/2006/TECH/interne...eut/index.html
The article shows you how well the company responded to the problem, and their general concern and safety measures put to their customers, forcing them to change passwords and properly notifying them.
This is how all companys should handle this type of issue.