When Are We Going to Learn? Data Is Critical Infrastructure, and We Can't Trust "Major Companies" to Protect It