Initially I thought the disclosure argument they made was weak (we hack stuff because when we announce it similar companies will be more careful) because unless

Initially I thought the disclosure argument they made was weak (we hack stuff because when we announce it similar companies will be more careful) because unless they cause enough trouble to make security an immediate priority for a given non-targeted company, then it's unlikely that they will overcome that company's inertia. However I realised that I have become significantly more careful with password reuse now because there are no companies I absolutely trust to keep my information from leaking out.