Thanks for sharing this. You mention banking - protecting money seems like a much higher incentive for blue team than say, the security of a forum or online game server.
I think there needs to be greater punishment for companies that lose customer information. Only then will the incentives be large enough for something to be done.