Just got a voicemail from Google voice obviously intended for the previous holder of this number (I think Google recycles after like 5 minutes) saying that a security issue in Salesforce exposed this guys customer data for some time and wants to know what his obligation is on informing customers.