We received several messages yesterday about the monster.com incident and personal information on 1.6 million users of monster.com stolen.  We actually reported on this two days ago here:  http://isc.sans.org/diary.html?storyid=3295.  At the time, SecureWorks had discovered a cache of only 46,000 users.  Funny how the number of users affected (large in either case) forced the press coverage to become way bigger.

The incident reminds me of the LexisNexis compromise where a police officer's computer was compromised and his LexisNexis account was used to lookup personal information on 310,000 people.  Wired has a good article on the entire story from May 2005: http://www.wired.com/techbiz/media/news/2005/05/67629?currentPage=all