Prioritizing other activities over security. Probably in every one of these cases someone on the inside warned that they weren't doing enough about security, an

Prioritizing other activities over security. Probably in every one of these cases someone on the inside warned that they weren't doing enough about security, and nobody took action because there were no additional people available to work on it. Saying that security is hard is a cop out. It's the cost of doing business. Most places that are hacked should have been doing more about security.