How would you like to be on the end of a civil lawsuit just for leaking personal data?  Let alone whatever financial malfeasance has gone on...