>Someone threw a cinderblock through their window and made off with their trove of data. Sure, but maybe - just maybe - given that their "mission" was to keep

>Someone threw a cinderblock through their window and made off with their trove of data. Sure, but maybe - just maybe - given that their "mission" was to keep those data safe or "safe enough" they could have installed a somewhat tougher glass on that window. The general point of "you had one job" remains IMHO valid, independently from how bad other people/companies security is. Also, when there is a break-in you normally notice the broken window in a timely fashion, if the reports are accurate the hackers seemingly got the data over two or three months time or however it took months to notice it.