You know what will make this stop? Actual consequences for not preventing data breaches, like jail time.