Evil geniuses aren’t to blame for most breaches of personal data. Usually, the information is all but handed out, thanks to carelessness or stupid decisions.