Seems the journalist and a lot of commenters here are saying that a service like this needs to be regulated so that there are consequences for negligence or carelessness. There's probably something in that, but in the absence of a regulatory framework for social media systems, snapchat surely has no liability or requirement around data security (beyond existing regulations).