Addendum: just read the letter in question. Even by the standards of data breaches, this one is astonishingly bad.

But don't worry, DentaQuest has “engaged security experts and provided more employee training.” Which sounds like a case of locking the stable door after the horse has not just bolted, but is chilling with cocktails on a beach in Rio.

New rule: any time a company suffers a major data breach, the CEO and CTO should be ritually disemboweled on the floor of the NYSE. Seem reasonable?