There needs to be massive lawsuits over this stuff to the point where companies should consider it a serious liability to hold customer data for anything other than material purpose.