That's the kind of thing that pisses me off. I'm more than willing to do business with companies who have had security breaches as long as they've learned from

That's the kind of thing that pisses me off. I'm more than willing to do business with companies who have had security breaches as long as they've learned from the mistake and corrected it. Target had a massive security breach and they overhauled their entire IT security infrastructure and replaced all their POS systems. Good. I still shop at Target occasionally. Home Depot had a breach and their executives said "this was expected, we aim for a C level of security not an A level" and didn't want to spend additional money on security. That's unacceptable to me. Linode had a security breach and said "it's fine, it only impacted a few people and they only lost tens of thousands of dollars" and then they got breached again and said "yeah but it's not our fault that we use an unpatched version of ColdFusion for our admin portal". They never took ownership of their security issues. That's unacceptable to me. Equifax got breached again during their other damn breach investigation and who here remembers that Equifax even made the news? No one. A year later it's a non-event. Unfortunately, most people don't share my beliefs so Linode and Equifax get away with it, and Home Depot's "it's not worth it to invest in security because there's no ROI" is completely true. Unless companies pay a heavy (I'd say existential) penalty for lack of security, nothing will change.