Possible to sue companies for lack of security/support?

That's pretty LOL. That only applies to criminal law. I can tell someone failed business law.

I don't know why we should continue arguing with yo72. It's obvious his intelligence is obviously lacking. His posts on the forum since he's joined have lacked intelligence from the start. Its really no surprise.

Edit: @ Leaves: in regards to proving that they've lost my information, I would probably make them prove that their ID/passwords and personal information are in two different databases/places. Otherwise, the fact that they got the ID and passwords but not my information would seem rather sketchy.

Yeah, I guess this is where it becomes sort of a gray area in terms of how in-depth you go with the structure of their databases. Anyways, the point of your right to sue still stands, and I guess that's all that really matters.