Intent is only half the crime, the other is opportunity.
Perhaps time for the other side of the problem.
Although a piccy of a cheap 'IT is just a cost, minimise it' laze faire attitude by management to securing customer data is harder to visualise.