This needs a high court precedent set
a data breach of this magnitude should be considered a priori evidence of the failure of the company to adhere to it's own data protection policy, and therefore a breach of contract.
Can we have a Judge Dredd icon ? (And maybe, following Private Eyes example, a "Judge Dreadful" icon for numpty judgements ?)