Equifax already has shown that there are no consequences. If they took data security seriously then a breach of that severity should have seriously endangered the company but in reality nothing happened. I am sure other companies have been watching closely and concluded that the cost for proper security practices is too high compared to the cost of a breach.