Have any companies had significant fines levied? Certainly nothing large enough to change behavior. The OPM leak remains the most significant overall of which

Have any companies had significant fines levied? Certainly nothing large enough to change behavior. The OPM leak remains the most significant overall of which I'm aware. The Experian leak tops my commercial data leak list, although they get bonus points for then selling people their own data protection service(s).