Total irresponsibility. No self-respecting company would allow that, especially when the personal data of hundreds or even thousands of customers are at stake. And this is not one case, there are hundreds of other companies that lost client's data due to poor security systems. These companies should carry out a range of penetration tests in order to identify vulnerabilities that require urgent attention and fix them. I do monitor my bank accounts and all of my credit cards because these companies know way too much about me, and with such an attitude on personal data, there's no chance I'll share anything else.
