In reply to Steven Gliebe.

Really serious security failures at large hosts that affected a lot of people are typically well reported by a wide range of reputable sources, including the host's own public statements. Keeping some type of historical log of these for each host might work. Maybe a brief what happened and action taken summary.