The value of avoiding a security breach is soooo often overlooked. Classic case of upper-middle management willing to just limp along with legacy security issues because nothing has gone wrong yet...