This isn't the first time they were hacked, and it won't be the last. There are no repercussions here aside from some process shit around notifying folks (that

This isn't the first time they were hacked, and it won't be the last. There are no repercussions here aside from some process shit around notifying folks (that companies get better at doing the more times they are breached...!). We need laws with teeth similar to HIPAA for personal data usage.