> Until there is some kind of law in place that makes companies financially responsible for this kind of blunder, it will proliferate. It will still be out the

> Until there is some kind of law in place that makes companies financially responsible for this kind of blunder, it will proliferate. It will still be out there. For example, in a startup that's trying to get off the ground, going bankrupt because of security issues isn't that much different than going bankrupt because you failed to gain traction. It will still be put off to "later." That said, with significant financial penalties there will be a point where the startup assesses the cost of security to be worth it (vs. now where there is no downside other than bad PR).