Comment Why is years-old data available online? (Score 2) 14
There should be some "friction" in accessing records more than a year or two old.
Whether that friction involves putting the older data in "nearline" storage requiring a robot to mount a disk or tape to access it, or whether it stays online but there's only a "skinny pipe" between it an the internet, an adversary shouldn't be able to transfer the entire database in less than a few weeks, more than long enough for tripwires to activate and a human to investigate.