Agree but...
As per my post the maximum fine that the ICO can levy is apparently £500,000 (hmm, I don't suppose that could be 500k per customer record? Thought not...)
I hope that the banks transfer the costs of any losses to customers to TalkTalk. They could certainly make the case for doing so.