It's an interesting question and something we have spent a lot of time thinking about and looking at.
On the question of credit cards, it has probably happened to you—I know it has happened to me—that I get a call from the bank saying, “Did you charge so much in a saloon in west Texas?” Gosh no, I was here in Ottawa.
It's in the interests of the credit card issuers to keep track of these things, and they do it, actually quite well, because they pay. You don't pay, they pay, because your liability is limited.
You mentioned the three million breaches. I think at one of the earlier hearings we tried to track it down and couldn't find it. It's really hard to know what kind of breach they're talking about.