Way too common & those companies breaching do nothing for so long, they could've issued the statement straight away, instead of months later! And why is it up to consumers/victims to take action- it just shouldn't be happening in the first place, they