Take your business elsewhere is step 1. Your information/service is not guaranteed if they aren't willing to protect it.