I don't think incidents like this are minor. I believe personal information security is very important. Maybe they see the consequences as small, but I don't.
I don't meant the consequences to the people who had the data leaked. I mean the consequences to the companies that didn't take security seriously and leaked the data.