If you're personally targeted, picked out as a target, and then they go looking for your data, then sure. But having your info percolate up from a bunch of big data sets, being mined for targets? Then there is plenty you can do to obfuscate and minimize your exposure. Like the old joke - "I don't have to outrun the bear, I just have to outrun the other campers". Congress could have civil penalties for being hacked - other than inside jobs, most hacks result from gross incompetence, just simple negligence, like Walmart and OPM. Make it hurt, big $$$$$, and suddenly their security will improve. . .