The thing that upsets me most is that none of the articles seem to think it's weird that it's even possible to leak this data.

They all think the leak is the problem, not the data collection, handling, and complete lack of information security.

I bet anyone working on this database could see all this data. 😱