Despite the near monthly occurrences of these incidents, the fact is that they have very little material impact to the companies who perpetrate them. If consumers, rather than venting on message boards, would in some numbers actually act in such a way that really affects these organizations (like moving their accounts to another bank) you would see more attention. In fact, so few do that there is very little economic disincentive to take any real action by the banks. Send out a contrite press release and be done with it. We saw this week that very little seems to have changed in the security culture at TJX after their breach. Why should it? Their revenue has increased since the incident happened.