But who would be affected, the institutions or the actual customers whose information was leaked? Any fraudulent activity based on the leaked information cannot be directly blamed on the customers themselves and should be a problem the institutions to be stuck with and solve.