I think that home depot knew, or should have known the value of protecting their customers data. They should have also had some idea or their exposure to the th

I think that home depot knew, or should have known the value of protecting their customers data. They should have also had some idea or their exposure to the threats that are out there. I think it's pretty basic. Any IT system has a collection of zero-day vulnerabilities. If the company is smart, they will track what these vulnerabilities are and mitigate the vulnerabilities that can be fixed. The vulnerabilities that don't get resolved will eventually meet up with a zero-day exploit. Then there will be a loss. It would appear that Home Depot didn't mitigate their vulnerabilities, and now they will have to pay.