I understand that they hired some people to improve security. They didn't immediately overhaul everything, but how could you? You can't replace a whole organization at once. There's a lot of institutional knowledge and things in motion even at dysfunctional ones.
