Consumers pay the price for data breaches