The “unreasonable and inadequate” cybersecurity practices of Ally Financial Inc. and its online Ally Bank subsidiary left the personal data[……] ....