Rather than blaming the website, we should be laying the responsibility at the feet of the outsourcing services and data security will not be a deciding feature of the service contract. and yeah, we got what we pay for..the cheaper price with risk for data breach.. i wonder if the FTC (Federal Trade commission) sue this small companies for having inadequate data security practices in violation of federal law..