[Garth Tater]

"The company said the passwords were stored on internal company servers, where no outsiders could access them."

"The company" knows as well as everybody else that more info is stolen by those sitting inside the firewalls than those sitting outside.

[cgbg]

I was watching a CSPAN hearing while Marriott and Equifax CEO’s tap-danced around the cyber-security issue. They ignored the potential insider threat—and the Congress-critters questioning them were clueless as well.

You are correct—most data breaches are not hacks at all.

They are inside jobs.

The first suspects should always be employees with access to the hardware and software.