They're not the victim - they're guiltier than anyone who grabs their customer data. When you provide an online service that gathers consumer information - par

They're not the victim - they're guiltier than anyone who grabs their customer data. When you provide an online service that gathers consumer information - particularly sensitive consumer information (such as that which you might find on, say, a dating site), it's your responsibility to secure it. If you get hacked, it's your fuck-up, your responsibility, your culpability. And no, that's not my opinion, it's objective fact - read, for instance, about PCI DSS, and the associated very steep penalties for information leakage.