>>colone+(OP)
My mind has fashioned me to think that these leaks, so called, are planned. To why I think so, is simple. When you, as Facebook, sell user data to other companies/third parties/countries, then it is crime, or is subject to investigation when it is known. But these so called leaks, are deemed "we are sorry, we will fix it, but we are so sorry about the data". And that is it. No one is responsible.
Now you have 50 million people's data for sale. Are you in that 50 million? You don't know or you will never know.
Connected incidents -
British Airways Data Leak, Equifax, Uber Data Theft Cover Up, Air Canada, T-Mobile, Dixons Carphone......how many such.
All of them soon will be available for sale, with no one to blame for.