Comment by jwr

If these kinds of breaches were actually costly, then people would indeed treat PII as toxic. But they aren't. The media brouhaha blows over within a week or so, and things are fine again.

Leaking PII should be very, very expensive, and then this idiocy would stop.