Well, and the fact that the hacked company is a victim of the hacking doesn't mean that they're absolved of all responsibility.
One of the reasons why major companies are more and more moving towards a system of purging customer records over time is that you don't want to make yourself an juicy target for hackers. The mentality should be that hacking is expected and inevitable and therefore you don't keep every shred of data for every customer on hand for all eternity.
(This is -- back to the Rowling issue -- one of the many reasons why I believe DW DRM is dangerous; if the purchaser info is kept for decades to aid in piracy tracking then you're keeping customer information for decades and that information WILL be lost when -- not IF, WHEN -- you are hacked.)
So, again, while I dislike a lot of Sony practices -- and by the way, Sony is not "the devil" and I haven't see anyone claim that they are, so please feel free to tone down the rhetoric, mmkay? -- and while I can agree that, hmm, hacking situation may not have been 100% their fault, I can STILL feel like their normal practice of keeping all that customer data on-hand for so long was a very bad business decision and they deserve flack for not adopting smarter industry practices.
|