millions of customer records sold

I’m not sure what is the worst part of reading an article like this that describes an obgoing investigation into the selling of millions of customer records from a “major mobile phone company.” The employee who had access to, ability to exfiltrate, and sell the records to competitors? The company that had no idea what happened until a third party had to break the news to them? The vague details that we’re yet again subjected to? That a company would buy such records (believe it!)? There are other issues I have, but I’ll stay quiet on them and only say that if there is a monetary value on data like this to someone in the world, then it will be realized, whether unauthorized or “authorized.”