Equifax survived leaking all that data. That still amazes me. Roughly 1 in 3 Americans had their PII leaked and they suffered minimal fines. Minimal in the fact that they certainly haven't been impacted operationally. If the laws can't punish that level of breach, they aren't going to punish the small potato sized ones either.