True, I work in ecomm and we definitely have database exports being passed around relatively freely. No passwords obviously, but segmentation data, emails, addresses, phone numbers, etc.

We have good IT security but it still doesn't feel great.