Be afraid, be very afraid, says Jim Bourke, CPA.CITP.
[youtube]p-X_CgPR7ZE[/youtube]
Recorded at the New York Accounting and Technology Show.

In addition to Federal regulations, forty-five states, the District of Columbia, Puerto Rico and the Virgin Islands have enacted privacy regulations requiring that companies and/or state agencies disclose to consumers security breaches involving personal information. More here.