Closing The Stable Door After the Horse Has Bolted
The trouble with all this stuff about "working with the regulator" and "learning lessons" is that the crucial data has already gone. It cannot be got back, it is now out there forever. The only way to improve this is for huge fines, removing directors (no golden handshakes) and stopping licences to operate.
With all theses "one-off" breaches that keep happening there cannot be much left that is secure.