There are times lately, when I wish we weren't so civilized. Drawing and quartering comes to mind when I think about what should happen to all executives and IT personnel involved with the breach. If they made a law that companies are responsible for all costs incurred to individuals who have had their data released/breached, things would get corrected very quickly. As it is now, it's just the cost of doing business. Like drug dealers, loose a shipment here and there.
You've never met real drug dealers then. Lose a front through no fault of your own you better pay that shit back or your gonna be drawled and quartered.