It's good to see a company actually owning up to and taking responsibility for its failure to protect customers' information instead of trying to bury its head in the sand or conceal the facts.

I hope the extortionists get all they deserve.

If, and when the "get" these miscreants, may I suggest an appropriate punishment:

Execution by firing squad.

Also, to Express Scripts: FIX THE DAMN SYSTEM!