At this point, I just operate under the assumption that every bad actor out there already has my data. Six months of exposure is an eternity. It really makes you question the entire trade off: we hand over our personal information in exchange for ‘free’ or convenient services and this is what we get in return. The product-is-you model only works if the company holding your data actually bothers to protect it.