Company sent my personal information via unencrypted thumb drive and lost it in the mail along with 7,000 other employees!

Additional information
on this thumb drive is unencrypted (a mistake by the employee who copied it in the first place).

Among the known information contained on the unencrypted thumb drive (and for the other 7,000 employees) was my name, address, social security number, and corporate stock option information. The company stated that there was also other information contained in the files, but they were not specific about what the additional information was.

The company has offered each employee a membership in a credit monitoring and identity theft insurance product, but for one year only. My problem with this is that identity theft doesn't happen overnight. If someone stole this thumb drive, it could take them years to go through the personal information on 7,000 employees.

The thought among the affected employees is that it should be a lifetime membership. The was the company's mistake, and 7,000 employees' credits are at stake.

Any advice would be very much appreciated! Thank you!

Jackie