I continue to be surprised by how little impact gigantic hacks seem to have on large companies. Countless media reports of deep intrusions, stock market valuations not dented in the long term.
Until giant hacks result in actual pain being experienced by the leaders of these companies in the form of jail time and/or fines that aren't rounding errors on the balance sheet, no one will care.
