 are dealt with before large numbers of customers are negatively impacted. It's not even as if most of these breaches are the result of novel or dramatically new types of attacks. Mostly, they seem to be garden-variety credential theft resulting from email phishing and the like. Same sort of stuff that's been going on for many years now, even though the technical means to largely prevent these have been known for almost as long. It's really just a matter of getting the persons running these large firms to decide they need to allocate as much care to security as they do to their profit centers