[yompers888]

It's most likely that people with authority in the organization refuse to acknowledge the scope of the problem. People get upset about having to reset passwords, so imagine how they feel about being told to reformat or get entirely new machines. And frankly, those may not be viable options, because a competent and well-backed adversary will probably find their way in, even if you set them back at the starting line.