So a company that has enough information on millions of people to basically steal their identity doesn’t need to do security audits? The fact that this was allowed to happen and it isn’t being flagged as a disaster is insane. Basically they have all the information that anyone could use to steal someone’s identity and…