It's worth noting, though, that unlike the government's data losses, what's been lost by HSBC is not an ID theft kit, as it's lacking most of the information.
Yes, it should have been encrypted, but as recent data loss issues have gone, this is not that bad.