Tucking the hacker's plumbing aside for the moment...
I think this highlights these companies' fetish of collecting too much information and holding onto it way longer than is needed. Their lust to squeeze every last penny out of your data exposes you to risk, at virtually none to them; their only exposure vectors are the potential
PR hit if they get
caught, or for a competitor to collect and monetize the same data.