It seems that every day lately there are reports of a new hack against a major company – from Sony to Lockhead Martin to Citibank. The Privacy Rights Clearinghouse reports 56 major breaches from hacking so far this year alone. The RSA Breach in March has elevated the interest of this issue but getting useful information means filtering the signal from the noise. We will do our best to keep updating this post with relevant stories.

June 19, 2011: Another 1.3 million users have their data stolen. Recommendations to change passwords.

June 17, 2011: Costs for mitigating risk of compromised tokens to fall heavily on consumer-focused businesses, banks and other financial organizations.

June 14, 2011: KuppingerCole recomends methods for guarding against social engineering and replacing compromised tokens as soon as possible.

June 13, 2011: "Not every breach results in a crime. But identity theft has ranked first among complaints to the Federal Trade Commission for 11 consecutive years, with 1.34 million in 2010, twice as many as the next category, which is debt collection."

Breaches emphasize that relying on any one system too heavily is poor practice, according to Eve Maler, principal analyst at Forrester Research.

Gartner suggests companies with legacy tokens add additional security measures until they can be replaced.

Customers in industries not designated by RSA as being at high risk of attack – and to which RSA may not yet have reached out – will have to pay for new tokens.

Forrester finds many companies looking away from legacy token solutions.