>>80549995Companies have no real incentive to take security seriously. Investing in security doesn't make the line go up so they don't see it as worth it. If they do get hacked, they lose maybe a day's worth of profit from the damages while their customers are the ones who suffer.