Data theft puts IT on hot seat