While stealing music from a band might not be equal to obtaining and releasing customer personal information, there are still lessons to learn from this incident.