It's hardáto say how many data breaches fall into the category of custodial carelessness (government laptops stolen), provider carelessness (consumers handing out their social security numbers to anyone who asks for them), or maliciousness (outright data theft for financial gain, on any scale - see Certegy'sáID breach lost 8.5 million names on p.4 ).