So: you get a letter or email telling you some of your personal data has been handled carelessly by yet another provider, and squirted into the darknet. Yours and 112 million others'. How do you feel when you see that? Are you enveloped in a sense of urgency... do you spring into action implementing all the corrective measures suggested?
I mean, we know we should. But look at it this way. Our lives and records, the core that matters, are already locked down pretty well. Our banks ping us with fraud alerts if we so much as cross state lines and buy gasoline or coffee. Our credit reports should have been on deep freeze for ten years already.
The pace of new disclosures only accelerates. But when the adrenaline is gone, it's gone.