I received a letter from a cash processing company saying one of its employees sold their data to a direct marketing company and my identity / credit could have been compromised. This will be the second time this year I've had to deal with fraud / potential fraud. Is this company legally liable? Should they be held accountable?
