I really dont get how in todays world, where it is not IF you get attacked but WHEN you get attacked; these companies are still refusing to invest in post breach tech and forensics!
Seriously... whatever happened to being accountable? whatever happened to business reputation damage limitation? Whatever happened to protecting your most valuable assets... Your bloody customers!!!
There is no excuse for sloppy security. There is enough tech out there now to investigate an attack as it happens, see what happened 10 minutes before, 10 minutes after AND know exactly what was taken.
Its just lazy and arrogant not to protect your IP and customers. I hope millions walk from their shocking service. Much better than any fine imposed.
Biting the hand that feeds IT
