Yet, no one will lose their job. Incompetence is never punished.
I have been saying for years that we need laws that make any entity that demands your personal information wholly liable for any and all consequences of misuse of that data. Put all of the burden on their shoulders and we would quickly see them take security much more seriously. The current situation only incentivizes the mass collection of personal information, but not its protection.