Two things that may inspire improved customer database security:
1. Jail time instead of fines.
2. Shareholders eat the losses, followed by shareholder revolt, followed by new management.
If all the losses, fines and payouts to class action lawsuits are regarded as "costs of doing business" and simply tacked onto next year's premiums, then no improvements can be expected.