If you happen to be a company in the field of protecting personal information (PI), you would think that you’d take precautions. If your shop cannot do what it says on the tin, customers will flock to others that can.
Especially when you have a court order to do so.
Lifelock an ID Theft protection company received a court order in 2010, quoted by Wired:
Lifelock had been ordered to remedy that situation, but according to the complaint filed today, it has failed to do so.
Not ground breaking news but protecting information involves people, processes and technology. Encryption, password management, need to know, patching are all basic measures not followed.