One would think companies would be savvy on the whole IT-security thing by now.

One would think companies would be savvy on the whole IT-security thing by now. Sure, a security expert doesn't come cheap, especially if you hire a vendor to run your IT, but what's more expensive, covering your ass or dealing with the bad publicity or lawsuits that stem from hacks?
http://www.zdnet.com/article/adultfriendfinder-network-hack-exposes-secrets-of-412-million-users/