So my hosting service recently informed me of a personal information leak due to a data feed that “accidently“ went public. I'm lost for words.

You are probably going to see many more such admissions with the new law.

Before, they would pretend it never happened until it got public enough.

Thats why the new law requires companies to inform promptly or face step fines.