It's not. Failing to protect data that impacts customers/clients whomever is irresponsible and you can be sued for it and you can be ordered to pay the damages that you caused. It sounds mean, but you know what is really mean? Causing unnecessary harm to people who trust you.
