> such a failure to protect consumer data and privacy would be in serious breach of legislation I imagine this is true in the US also (which may be why the OP

> such a failure to protect consumer data and privacy would be in serious breach of legislation I imagine this is true in the US also (which may be why the OP asked about reporting this). > result in significant fines This part I have less confidence in. :(