"If you are responsible for so many payment card details and log-in details then keeping that personal data secure has to be your priority, " said David Smith, deputy commissioner and director of data protection at the ICO.
BBC: Sony fined over 'preventable' PlayStation data hack