The funny thing is that these incidents are probably what it takes for those particular companies to beef up their security culture. Everyone else will likely k

The funny thing is that these incidents are probably what it takes for those particular companies to beef up their security culture. Everyone else will likely keep their heads down: "How asinine of them! This dumb thing could never happen to us." The truth is that without the right security processes and culture in place, it could really happen to anyone dealing with substantial value and overworked mid-level managers, a form of the principal–agent problem[1]. Security incidents have a stark resemblance to emergency room visits. People are so hard to sell on prevention, and they end up paying big for an ER visit. [1] https://en.wikipedia.org/wiki/Principal%E2%80%93agent_problem https://en.wikipedia.org/wiki/Principal%E2%80%93agent_proble...