[ghaff]

And most customer lists are on Salesforce. ADP has everyone's salary data. At the end of the day, the safe thing is to just disconnect all your computers from the internet. But that's not very practical so you decide how much of your company's time and energy you want to devote to reducing potential security exposure while your competitors are just taking advantage of available online services (with some level of security due diligence).