50 shades of grey hat: When is it right to go public about a security breach?

The ethics of IT security are still evolving: one in five security professionals say they have worked for a company that covered up a data breach.