So QF are really sorry...blah blah. My question is they have through one way or another leaked personal information of many. What recourse (action against QF) is open to the affected?
I also believe that QF would not know much about risk management and how to recognise (risk). Once again...