I cancelled my AT&T account over 10 years ago, yet they still stored my (old) address, full name, and SSN in the previous hack in March. The fact we don't have

I cancelled my AT&T account over 10 years ago, yet they still stored my (old) address, full name, and SSN in the previous hack in March. The fact we don't have decent legislation to materially punish incompetent organizations is beyond absurd.