I used 'allow' as in, "take into consideration", not "allowed to do something." You're not wrong, but the huge difference is knowing about specific attacks ver

I used 'allow' as in, "take into consideration", not "allowed to do something." You're not wrong, but the huge difference is knowing about specific attacks versus constantly assuming your data is always compromised. Changing your password daily, and canceling your credit card for a new number daily, regardless of breach, is basically what you're suggesting. Further, we still don't even know if it is in fact a hack, which is the point. If they simply came out and said that their production line got ransomware, but user databases were unaffected but taken offline as precaution, that would go a long way to suggesting what level of mitigation is necessary