Items 2 and 3 will increase massively as people who don't know what they're doing attempt to cover their butts.
Meanwhile, I'll name a dozen that got breached/leaked data, and got away with it: Experian, Microsoft, Facebook, Google, Marriott, Yahoo, First American Financial Corporation, Deep Root Analytics, Court Ventures (a subsidiary of Experian), Capital One, Anthem.
Go on, search "list of largest data breaches" and then see how many of those companies are still in business.
It sure seems like large companies aren't suffering for their breaches.