And still it goes on...
Nobody cares about your personal data any more. Companies all over the place are storing their data on unencrypted laptops or posting it on unencrypted tapes/CDs. I used to work for a company that looks after the pensions for a number of police forces and while they had (pretty lax) security around the rack containing the data they had no controls on people making copies over the network to their laptops, ipods, etc. This company holds pension data (including the full set of personal information) for customers of the Pru and most of the civil service pensions schemes run for the Met Police, NHS etc.
This is largely because they believe that promoting people on "time served" rather than ability is a good idea and have got senior "technical" staff who think that having 17 firewalls which are all using outdated software (and have no support contract) is better than having two that are actively managed.