In some sense companies that don't protect your data make money off the back of your data being leaked (in the sense that they saved money by not spending it on security)