If someone smashes a window and burglarizes your home is it your fault because you didn't put bars over your windows?
Your remark is a false analogy. You are missing an important concept called duty of care in regards to companies that require you to provide them sensitive information in order to purchase a service from them. Try this one: you go to the jewelry store, and secure into their care a $100,000 jeweled necklace for repairs. Overnight, a burglar smashes a window in the store and swipes your necklace. The store just calls you up and informs you it has been stolen, so you won't be able to pick it up, and we're sorry we can't help you replace it, BUT we will offer you a 25% discount coupon good for 2 years. There were no bars on the windows, and a worker just left your piece on a work desk or file cabinet. Only the products actually owned by the shop are locked up in a special vault after closing.
An essential fact to keep in mind, is that you as consumer have no control of the shop's level of security.
Now imagine if instead of a $100,000 necklace, it was a piece of intellectual property or personal details, where theft could be occurring without clear physical evidence.
I will agree if a burglar smashes the window of your house and burglarizes your home, the burglar is fully responsible, but only if caught.
In fact, you as homeowner will bear the cost in reality. The cost in lost items, OR the cost in increased insurance premiums that will ultimately exceed any amounts claimed.
Although you as homeowner had a choice to beef up your security, you could have chosen not to.
However you are not free of liability in this situation.. Your liability is your loss in this case.