Ethics of a business model that notifies owners of the breach, but they have to pay $10 for specific details or wait a week?