So I got a notice from Ticketmaster that my identity was accessed by an intruder and my name, contact info and /encrypted/ payment info was compromised. These notices are more and more common. Why aren’t companies accountable for damages when they fail to protect all the myriad data they collect on people without consent? I never asked them to store these things…
You can not believe them all you want. It doesn’t magically make everyone competent.
Businesses value MONEY first, not security, not happy customers, not competent staff. MONEY.
Which is cheaper? Get a product working enough to sell. Get a product properly developed, secured, and audited.
Pick one. Hint: corporations choose MONEY. Every time.
Your data is not safe, because rich pieces of shit like MONEY more than they like YOU.