It's not like anyone chooses Transunion, or Equifax. They have your stuff whether you like it or not. They are massive targets for state-sponsored hacks and they just don't seem to know how to keep what is literally the most important and sensitive data about you safe. But what are you gonna do? Switch to some other agency?

Good questions and good comment. Thanks. The group is a small, education-focused group without salaried staff. They put on a fantastic educational event once a year that serves about 2000 area students. What they do is truly amazing - my kids have been involved and learned a ton. They are looking to have the software written and maintained by volunteers, and the volunteers may change from year to year. I'm concerned about the viability of maintaining software year after year, and that the group will be managing and producing (and supporting) software when that may not be what they intend. I'm hoping to find an angle that will help show the difficulty of doing so.