Security incident at a mortgage servicer (Mr. Cooper)

Is it just me or are these becoming more common now?

My mortgage servicer has so much valuable data on me (PII, bank debit details, est. income, home value, loan amount, etc.).

We need companies to justify why they retain sensitive data vs deleting it right after using it.