No consequences, the trend will continue. Consider all of your information compromised, always.
It's completely ridiculous. There's zero consequences for bad security. All companies need to do is report the breach to the government, buy "credit monitoring" for the victims which costs pennies, and deal with half a day of bad press on Twitter. Meanwhile, consumers have to deal with identity theft consequences, which in a court of law, is nearly impossible to tie back to a specific incident.
Until governments impose serious fines, even to mom and pop businesses scaled up to massive corporations, this will not change.
People already use GoodRx discount cards at pharmacies.
Good luck getting your insurance company that pays $100k to senior engineers to do that.
>$100k to senior engineers
Could be half that and no technical screening whatsoever.
Outsourcing frequently means outsourcing to people in the US who are paid enough less to be a logical option.
On the EU side, we have smart chip national ID cards that are being adopted EU-wide.
In Croatia, you can use those smart chip national ID cards for governmental affairs with a USB smart chip reader (for authentication) on the e-citizens portal.
Especially with the right systems far more people can be harmed than by a building collapse :p
>Until governments impose serious fines
Or maybe change the language? It's not possible to steal an identity; it's a fiction that is convenient for corporations handling personal information in ways that cost society.