You are 100%, and it's not just the data we provide to companies we buy products from. I got snail mail last week from an employer I haven't worked for in almost 3 years that said an administrator accidentally sent a mass email to a few thousand individuals with my bank account information, and the bank account information of everyone that was on that email chain (and I'm assuming a few other prior employees). WTF.