In reply to:
From what I've been reading, Plusnet haven't given out any details. The details were obtained illegally. Now while one can't condone breaches in security, I've amazed that no one has even bothered to have a go at the perps of this crime. A bit like blaming the bank for an armed robbery.
It may be the robber who stole from the bank, but it was the bank that left the door open. In this case, Plusnet left the door open in some way, shape fashion or form. They choose the software, they choose how much they monitor and audit access to it and they're also presumably responsible that even people who've long since left plusnet still have details stored (when surey they should have been removed).
It's plusnet's responsibility at the end of the day, and the buck stops with them.