Maybe we can start with heavy penalties for whoever responsible for these breaches? The users are irresponsible, but at the higher levels, the company can afford to tighten access and guard their data better.
Would these companies leak their own business critical documents? No. So why can't they be forced to treat sensitive customer's data the same way?
Would these companies leak their own business critical documents? No. So why can't they be forced to treat sensitive customer's data the same way?