Panic and/or complain loudly, I guess? You can't fix a data breach after the fact, which is why organizations need some sort of pressure to take preventative measures.