The never ending story. A fine, in this case starting at $100 per customer hack, would be a good start to make companies take these things seriously. They can afford it.