It will only get worse
Within the current legal legal framework, TalkTalk were a bit silly to not encrypt. Then again this is a company that can't even protect against the most basic of SQL injections.
In the future David Cameron will be rendering such encryption illegal. So we will see more of these breaches as all data is in the clear because "terrorism".