Comment by jfk13

This is pretty appalling, really:

"Overall, of the 83 firms known to have held data... 24% supplied personal information without verifying the requester's identity."

Want someone else's personal data? No need to "hack into" any systems; just ask for it!