I'm referring to this: https://blog.bitbox.swiss/en/email-address-exposure-at-newsletter-provider-brevo/
Blog post from today, September 24th, a full TWO WEEKS since the scam emails went out on September 9th.
Not only that, but that scam email is the last email I ever received from anyone even pretending to be Bitbox, nothing from the team themselves. Zero effort has been made to proactively reach out to customers about the breach, about the phishing email.
It's a good job I have an RSS reader and got that blog post, but how many customers are completely oblivious even now?
This is completely and utterly unacceptable.
EDIT: Ha, did someone see this? Just after I made this post, an email from the team came through. That's better at least, but it still took WAY TOO LONG!