Yeah but "hundreds of millions" can buy a lot of cybersecurity consultants. The shoplifting loss from a single store probably doesn't make much of a dent in a S&P 500 retailer's profit either, but they still spend money on loss prevention because it saves money on net.