All too often, companies take data security far too casually. I guess they assume nothing is going to happen.