I believe that this is a responsibility of all third parties that manage this type of information. I also think that it is our right as consumers to receive notification when our information is breached, so that we can take appropriate precautions to prevent an actual theft event, or to minimize damages.