I'm not sure why this company believes they deserve to stay in business. They've proven they're not good at security to a percentage of their customers and might be about to cause a lot of bad will with the rest of their customers.

More importantly, if I'm an unaffected customer and can swallow the "haircut", how do I know they won't be hacked again?

EDIT: As a customer getting a forced haircut, I would also expect the company itself to get an appropriate haircut.