The problem is the companies aren’t suffering the majority of the consequences of the security breaches, it’s the people these companies have personal information on & that includes people who have never done business with these companies but that these companies purchased data on.
Then why do the Ukrainians also use it?