[mark-r]

The best way is to point out real-life bad outcomes. It's a bit difficult because they tend to be hushed over. Here's one example, I'm sure nobody had access to their database either: http://www.bankinfosecurity.asia/articles.php?art_id=2415