I don't know why anyone would be shocked. Companies constantly steal your data and do nothing to protect it. It's becoming so common that there isn't even outrage anymore, it's just par for the course.

Oh my car company had a data breach? Oh well, so did my credit bureau, every store I go to, every website I visit and my phone company. /shrug