Of course they get hacked. That's part of the big evil plan. Eventually in a couple years, after ISPs have shown their incompetence, the call will go out for this data to be stored at a secure government location.
I am reminded of a quote from the BBC Wold debate. An audience member described typical ISP security in Australia as "Two men and a dog".