The day you can hold a corporation accountable for breaking their own terms of service is the day I will come around to this argument.
As things stand, they can have an obligation to keep your data secure, have system with massive security holes, loose your data resulting in you being a victim of fraud, and the company will not pay a penny.