Does the basic security scanning the hacker was doing costs hundreds of millions for big companies? Because that's the fines some big companies are getting:
https://www.csoonline.com/article/3410278/the-biggest-data-b...
or at least tens of millions in the EU thanks to GDPR:
https://www.enforcementtracker.com/
We understand it's nothing compared to their profits but is it nothing compared to the cost of basic security?