There should be a government body to whom security breaches like these can be reported. Companies can not be trusted to police themselves when it comes to priva

There should be a government body to whom security breaches like these can be reported. Companies can not be trusted to police themselves when it comes to private data. You could try the DSD CSOC. They're mainly interested in threats to Government agencies but may pass it on.