The stalling of federal legislation and the continued expansion of data brokers are fueling a phishing epidemic.