Organizations that don't get hacked, potentially losing data, costing large sums and money, and inconveniencing customers. They benefit. Remember them?
2) Customers don't really seem to care. There has been no major protest in any country over personal information getting leaked, it doesn't affect most people on a personal level so it just doesn't matter.