i could give you a list (but, for legal reasons, i wont)... of companies that have had data breaches like this... and worse...
they usually dont make it to the news unless the company (virgin in this case) is under the microscope for some reason or another...
long story short... it happenes more than enough to make joe paycheck worry themselves to death... luckily the good companies (yes, they exsist) get on some serious 'damage control' PDQ and help those affected...
...want even more to chew on? ive bought and been given many computers over the years that have had sensitive data on them (company computers issued to the employees) including names, addresses, and even SSN#s ... step one when getting a machine like this is either delete the data with a DOD style 'wiper' program (if the computer has a specialty OS or drivers that simply cannot be found anymore) or reformat and reinstall a new/different OS (usually linux in my case)... but who knows what a more unscrupulus person would do with what they found on that ancient thinkpad they found at the thrift store....