Scribd and SlideShare use several means to protect the personal information that you disclose to us. However, no online system is completely invulnerable to a sophisticated attack. This article describes how we notify our subscribers, members, authorities, and the general public about incidents involving customer data.
The terms we use
There are several different ways that personal information can be exposed. Our notifications will describe such exposures in specific ways. Typically, a data exposure is defined as an incident, breach, or a leak.
- Data incident. A data incident refers to any data exposure situation that is not, or not yet, defined as a breach or a leak.
- Data breach. A breach refers to any situation in which customer data is maliciously obtained by a third party.
- Data leak. A leak refers to any situation when customer information is inadvertently exposed by Scribd or SlideShare.
How we notify
Once Scribd becomes aware of a data incident on any of our sites or apps, we will notify our subscribers, members, and relevant data protection authorities as soon as we fully understand the situation, or within 72 hours, whichever occurs first. We will notify subscribers and members with verified email addresses via email. We will also post the notification to our websites.
We recommend that you use a strong, lengthy password that consists of multiple characters, numbers, and letters. When you sign up or change your password, we will search public databases of passwords known to have been leaked or compromised on other websites in the past. If your password matches one of the compromised passwords, we will ask that you choose a different one.
Personal information posted to Scribd and SlideShare