It's often a violation of both government laws and insurance contracts, if you knowingly expose that much financial information to a proven vulnerability.
There are businesses where if you suffer a theft, you shut everything down and run a stocktake. For example, an arms dealer. And there are times credit card providers shut down - because there is a known vulnerability, and they have to immediately mitigate, or lose their insurance.
