-snip-
One thing to keep in mind is that Microsoft is a massive company, and cannot individually solve the problems of an insignificant number of users without causing both a loss of profit and suspicious under the public eye. This is not to say they still deal with things quietly.
The CVS is the first case of a small, local incident. The problem is not CVS as a whole, but rather that one location that only affected customers there. The pharmacy addressed the situation, fired everyone involved, and issued a public apology, and I'm pretty sure is working with banks to solve the issue. Stocks faltered for a moment, and then actually went down before going up again, likely due to the good handling of the situation.
The majority of cases are limited to a local area, or one specific target part of the company, which seems to have been dealt with. The first major, non-local breach of data stated was Starbuck's app hack. The blame is primarily from "brute force" password guessing attacks, which basically means people with the app needed to have better passwords. In response, Starbucks gave out cyber security tips publicly ([urlhttp://fortune.com/2015/05/13/starbucks-cybersecurity/]source[/url]) and began reimbursing customers (
source).
As soon as AT&T found out that their call centers, which were unfortunately outside of the US and therefore were less protected, they immediately began informing customers and strengthening security, as well as firing everyone at the vendor sites where data was stolen. They also received a 25 million dollar fine from the FCC. Their stock remained largely up and down at the same rate until two weeks later, when the problem had obviously been resolved.
---
Like I said, companies need to be careful, because not only the government but people themselves will give this information to the press, and cause a huge stink. Companies have every reason to keep things under tight control, and the reason there aren't riots are because these things are dealt with fast. I've had my credit card information stolen twice now, and both times Wells Fargo apologized and gave me every penny back. If they didn't do that for affected customers, everyone would complain and they would suffer. The reason those stocks went back up was because the company dealt with it, and managed to recover well.
No programmer would even want to ever try sifting through millions of bits of data, just in the rare case he comes across credit card info. I guarantee he'd much rather receive it in the form of a cause and effect chart, therefore avoiding looking at any specific data in the first place.
I know there is the statistically impossible chance that Microsoft will be able to take my personal data, perhaps even on a whim. But I'm not scared. Why? Because if anything, it's safer than what Google and the government can do. If you are suspected of fraud or security breaches, the government will just take your computer and your phone and every email you've ever sent in different ways. And those have the same amount of probability of abuse, if not more, of that then of Microsoft.
Face it, if the law wants your data, they can get it, and more likely other means than Microsoft. There are so many ways that my data is able to be accessed in even the slightest way that I gave up caring, because it is inescapable and frankly doesn't hurt you in any way at all. I don't care if some bot looks at my email through Microsoft, because Google probably took it long ago. And if someone were to use this data for abuse, other places would likely be more likely to do so than a major corporation under close watch of the people and the government.
Why worry about the statistically impossible chance of Microsoft taking your data, when its really nothing different from everything else? If you actually find yourself a victim of fraud or identity theft and the cause was Microsoft, make a stink, and I guarantee there is no way they won't solve your problem. What if you told Forbes Microsoft took your email data and then used it to take money from you, and when pointed out they only gave you 5 dollars?