The fix is to have laws that recognize that data is extremely valuable personal property, that stealing it is a criminal act and that the predatory "buying" of it (such as offering a $ service in exchange for $$$$$$ worth of data) should be highly regulated.
Maybe amend and strengthen the Uniform Deceptive Trade Practices Act and then make it Federal instead of just some states?
Of course this kind of lawmaking has gone out of fashion and was only around for a couple decades so I'm not holding my breath.