Yeah, the Home Depot thing sounded similar. Sure, this particular data breach has no bearing on their general financial position, and you can make a compelling argument that you should ignore it: it&#x27;s a one-time weird thing, and they&#x27;re not going to have data breaches every year.<p>... or are they? At least, will they have data breaches every few years? What&#x27;s the annual cost of doing all the work needed to prevent data breaches? If it&#x27;s less than the averaged-out cost of cleanup, why weren&#x27;t they doing it all along? If it&#x27;s more, and they&#x27;re accepting data breaches as a cost of doing business, shouldn&#x27;t they be reporting that cost?<p>And if they don&#x27;t think it&#x27;s going to happen again, why not?