"It is really just fundamentally terrifying" -from TFA.

Yes, yes it is.

Those handling data like this, from whatever source, need much tighter regulation, since they are unable to regulate themselves.