Unfortunately not at the FIs I have worked for. Their approach seems to be "give the illusion of security while covering any actual losses with insurance".

I think there needs to be greater punishment for companies that lose customer information. Only then will the incentives be large enough for something to be done.