What is your source for that info?
Also, whether or not it cost the business money has nothing to do with the quality of the break-in.
Also, whether or not it cost the business money has nothing to do with the quality of the break-in.
The things that matter during an attack: how much damage was caused, what kind of data was compromised, and how much it will cost to get things fixed. The quality of the attack is only a factor when it comes to cost/benefit of fixing the vulnerability.