This is going to continue until legislation is introduced to fine companies for each customer data point exposed. Eg a single data point = $100. Email, name, address - that's $300 per customer.

Some recent hack exposed my name, address, email, and phone number. Now I regularly get emails that are just all these details and an attachment.