I said no serious financial hit, not no hit. Serious in terms of "the stock price went down significantly", there's still costs of breach clean up etc.
Also there's a big negative externality in that a lot of the costs are borne by users of the app/system and not necessarily the developers, but due to a lack of liability for software development and security breaches that isn't taken into account by many companies
