Oh I'm sure there would be insurance for that, but it would be expensive. It would dramatically reduce the amount of overall investment in the nation. That is a very bad thing, it would slow down the rate of our economy and innovation.
Don't get me wrong, the current setup where companies treat your data like an asset and then lose it and nothing happens is broken. There need to be stiff penalties for it. Corporate death penalty even, especially with an ending of all too big to fail. I'm talking penalties scary to the point that whatever profit could be made from your personal information isn't worth the risk of having it, companies are scared to collect info.
This would especially be true if there is negligence involved, like when companies put their databases on open S3 buckets. Companies should be scared shitless of that.
But destroying our system of investment is not the answer.