This morning I read this article: http://ap.google.com/article/ALeqM5iZchJDcVnuQDNPJsok2PSPr5vwRQD8U823R03 The information of 650,000 people, 150,000 of which includes SSNs. Sure, GE is paying for credit card monitoring services, and they did take a while to gather the data so they could send letters(but as the article points out, people may throw those letters in the trash). Personally, I think this shit needs to stop. My idea to stop it, force the federal government to step in(SSN's are from the federal government anyway). Simply charge a fine of $1,000 per person who had their info lost by a company, and an additional $500 per person for every month that the company doesn't disclose that it occured. In this particular case, 650,000 people would end up being a $650,000,000 fine. Even if they only fined them for SSNs missing, it'd still be $150,000,000. This also prevents smaller businesses from being wiped off the face of the earth because they lost a small handful of information, but still penalizes them. Once the government has to hand out a few of these fines, you bet your ass companies will watch themselves, and your information better. It almost seems like a monthly occurence these large scale incidents happen.