I think it’s also worth noting that a significant amount of sensitive data is stolen by people working inside organizations (and not necessarily for profit–some may simply be trying to “get even” for some perceived slight against them). You might consider writing an article on detecting suspicious behavior within the workforce and restricting employee information access in an appropriate manner.

I recall one instance in which thousands of students at a major university had their SSNs stolen by a school worker. Really, this information should have been partitioned and not readily available to any but the most trustworthy school staff