Opening a second line of thought: in the above context I'm amazed people give away the pins/passwords to their loyalty programme to third party websites in order to track the size of their stash. Has any of you heard about such data being compromised and who bears responsibility if it happens?