christ
If they get away with this farce I'm just going to give up, there's going to be no point if Visa and Mastercard don't punish them to bother trying to get PCI implemented as every board member will go "well TalkTalk got away with a slap on the wrist why should we bother" and as to data protection I can imagine anyone wanting to have security enforced will be laughed out of the building.
They can't be allowed to get away with this.