In June this year, Boomerang Video Ltd, a small business selling and renting video games, was fined £60,000 by the Information Commissioner. Why? Because in 2014 an attacker got into its customer database, obtained payment card details and used them to commit...