[galaxytachyon]

Maybe we can start with heavy penalties for whoever responsible for these breaches? The users are irresponsible, but at the higher levels, the company can afford to tighten access and guard their data better.

Would these companies leak their own business critical documents? No. So why can't they be forced to treat sensitive customer's data the same way?

[jsnell]

This is not data leaked by businesses. The businesses were also not breached.

The data was stolen from the users' computers, by malware installed by the users themselves.