"If it's a public company, it's securities fraud. IMHO, securities law is the most effective tool at the moment in encouraging improved security engineering, best practices, and posture."

That's just a fucking sad state of affairs. Apparently they owe nothing to their customers.