No! They would comply, post an apology and continue the same way. You need to sue them for data breaches and endangering personal info. Of course legislation has to come up for stuff like this. Best day for that would be yesterday.