[reirob]

Is it really so that even a company cannot protect itself against a state sponsored attack? I am asking sincerely, is it really the state of IT security today? I mean, it is somewhat clear that since Snowden we all know that we could not even dream up in our nightmares how far NSA is going. But I was thinking, that since then at least companies with strategic data started to work on protection.

If, what you are saying is reality, what consequences can it have and what legal recourse can a client (corporation or private) expect in such cases? Who can be hold as responsible if sensitive data disappears? Does it need a new type of contracts when subscribing to a service?