I'm not a code "artisan", but I do believe companies should be financially responsible when they have security breaches.