So say some data was comprimised such as a way of mapping serial to seeds for tokens. RSA/EMC then told the customers that some of the tokens may have been brea

So say some data was comprimised such as a way of mapping serial to seeds for tokens. RSA/EMC then told the customers that some of the tokens may have been breached. Wouldn't you expect a "nation's largest military contractor" to attempt to get new tokens/change authorisation procedures? Or maybe they were paying HBGary for security consulting. It's not that it's "junk crypto" where the crypto part is mathematically sound. It was more to do with information leakage than source of "junk crypto".