I think this quote from the Security Analyst in this article says It all.................

Security analyst Troy Hunt said: “Despite the frequency of these incidents, companies are just not getting the message; taking security seriously is something you need to do before a data breach, not something you say afterwards to placate people.”