I gather they did identify a weakness after the breach.

My theory has always been there ain't no such thing as hackproof. If you are a tempting enough target, you'll be hacked.

That belief almost cost me my job. In the investment industry your personal trading is almost always very heavily scrutinized. In my firm, its all but forbidden. But you can have non-discretionary accounts. I have one, and our compliance team decided that collecting paper statements is too onerous. So they forced all employees to electronically link their brokerage accounts, if any, to our cloud-based compliance system. For months (I think it was even years), I refused, as I got presentation after presentation about the state of the art security protocols, which reduce odds of hacking to, you know, a really low number. 1 in 10 mil hacking attempts. Or a 100 mil or a bil.

I don't remember because it didn't matter to me - how long will it take a high value system to receive 1 bil hacking attempts? A month? A week? An afternoon?

I found a decent compromise with my firm. But I have to say, if you are a system with lots of sensitive info that people want, you'll be hacked. It's a question of when, not if IMO. I don't think it matters how state of the art your security protocols are.

Which does suck. I'm sure I am one of the 100s of millions of hacking victims here, as are probably most of us soapboxers. I don't know that I'm as angry as you.

I really just wish all the runaway proponents of things like self driving cars would pay closer attention to this reality.