[gruez]

Yeah but "hundreds of millions" can buy a lot of cybersecurity consultants. The shoplifting loss from a single store probably doesn't make much of a dent in a S&P 500 retailer's profit either, but they still spend money on loss prevention because it saves money on net.

[hackernewds]

The cyber security could plausible cost less than the EXPECTED value of the fines. That's the crux of it