The Heartland incident is a worrying case for companies who are following compliance initiatives.