11 times in the last 2 months or so. 11, very high-profile cases with tons of customers' and employees' details. And always the same trivial things; SQLi, no encryption/plaintext databases, lack of first-line security like firewalls, etc.