We live in a security conscious world. A world where my kids doubt the validity of everyone on Facebook; where my phone requires fingerprint ID, and news pages buzz with stories of data breaches and hacks. It is hard to comprehend that a company might not have such basics as a firewall for data security.

Even harder to understand is how a bank, charged with protecting its customers' money, would put real money into a vault but only spend $10 on second hand routers and skimp on essential firewalls altogether.

Perhaps this is an example of "people knowing what should be done" but not turning that knowledge into an action (they can't walk the talk). Or, is it a case of they didn't understand what was needed?

Either answer is beyond bad and unacceptable.