In my experience...
This will lead to massive spam from companies who buy this stolen data in addition to possible new fraudulent credit card accts. being opened and many more headaches. Companies who are negligent in protecting customer data should be held accountable both financially and criminally. You can bet if CEOs get sent to prison for 5+ years for their negligence, security will be taken much more seriously.
Biting the hand that feeds IT
