While one could only hope the people behind this data leak see's some form of criminal justice, it will likely only be a fine and a sternly worded letter telling these companies to get approval next time. They'll write it into their TOS and the business practice will be continued.
We really, really need to punish this kind of behavior. Lying about the actions and the actions themselves are despicable. This should ruin the careers of the people who made these decisions.
It reflects poorly on the justice system that this is true, but it reflects extremely poorly on H&R Block's lawyers that they didn't slip something into the terms and conditions about how "we may from time to time share certain of this information with our commercial partners". Surely they would have lost less than one customer in a thousand.
