The privacy of those files is only as good as the security...

The privacy of those files is only as good as the security the company has put on them. Companies make mistakes and people make mistakes. There is always going to be a chance those records are put up on the Web for the world to see.