I'm not saying that there aren't companies that are responsible with their data. I'm saying I really disbelieve that the majority of companies treat their data this way. There's too many fly-by-night shops.

My point though, is that the attack is definitely feasible. I think WM has every right to be concerned.