Makes me think, a directory that names and shames these vendors across all products & verticals would be useful. Sure, any company can appear in that list these days, given the state of passwords & poor security practices alone.
I mean at this point it might be easier to just list the Fortune 500. But in the context of this breach I'm not aware of a telcom that hasn't had a breach. Many have had multiple. Like bitcoin, the rugging will continue until morale improves.