I would agree with Moody's as both these industries retain in their data sets include is needed to facilitate identify theft (duplicate insurance card, drivers license). $'s to protect and $'s paid out for identity protection in the event of a breach would be expected in budgets.
