This damned FOOL should not have had classified information on something he could lose. McDonald's employees aren't innocent, either. Those involved should be fired for invading their customer's privacy.
I don't think it's worth $3M in damages, though. And the basic problem is the customer is simply stupid.
(in totally unrelated news, I grow older as all my PSN content downloads to my new PS3. The old one has a dead Blu-Ray unit (spindle motor won't run anymore), so keeping it for future revival.)