Statement: A popular website has been hacked and users' passwords may have been exposed. Courses of action: I. The company should inform users and force a password reset. II. The company should fix the security flaw and review its systems.