Just one lone publicly disclosed identity theft incident can make even the largest enterprise beef up information security and privacy practices fast.