This kind of inept security should be punished at a level that makes it cheaper to do it right than to pay a small percentage of their profits to continue with their assault on citizens' private info.
Until holding and losing PII (Personally Identifiable Information) is treated and punished like holding and losing radioactive waste, this will not stop.
The penalties for losing PII should be sufficiently high that even the most junior programmer should recognize the probably and immediately blanch whenever asked to write code about it.
Recent and related:
FBI Probes Service Selling 153M+ Drivers Licenses - https://news.ycombinator.com/item?id=49529621 - Sept 2026 (273 comments)
I read an article, and within seconds my personal data was shared with 229 “partners”.
This kind of inept security should be punished at a level that makes it cheaper to do it right than to pay a small percentage of their profits to continue with their assault on citizens' private info.
Until holding and losing PII (Personally Identifiable Information) is treated and punished like holding and losing radioactive waste, this will not stop.
The penalties for losing PII should be sufficiently high that even the most junior programmer should recognize the probably and immediately blanch whenever asked to write code about it.
[dupe] https://news.ycombinator.com/item?id=49529621
Not quite a dupe. That's the original Krebs one.