Operations like this should be a fixture. Considering that not only individuals and companies but society as a whole increasingly depends on digital infrastructure we should develop mandatory procedures and frameworks for measuring security and improving it. You can't drive a car without a license but you can grab personal/private data of millions of people and give it away to criminals without consequence.
