I left them an unhappy comment on Facebook this morning and directed an angry tweet at them. Then tonight a cooler head prevailed and I deleted the FB comment and emailed them telling them about the breach and explaining that was why I wouldn't be purchasing anything from them.

I agree others who've had problems should contact them too.