If this was banking or any other sector, they lose millions of pounds a day in fines for even cyber security and fraud prevention violations. It's literally just basic governance to make it hurt when they don't take responsibility for their customers.