Broader problem
He also noted that "Experian, like most companies the security industry anoints as 'repeat offenders,' has little incentive – or rather, lacks meaningful penalties – to increase its security. The company is one of three major credit bureaus and, as such, lacks sufficient incentive to have more security than its two competitors. It simply has to be as good as the others, not better."
It's not just Experian, or credit bureaus, it's practically all companies who lack incentive or penalties to be anything more than "as good as others" when it comes to security.
And we read about it here all the time.
Biting the hand that feeds IT
