Wish I could say that I was more than pessimistic. The sad fact is that firing of a C level employee often lands the person in a higher paying position. It is a completely different world than rank and file personnel. Good security can be painful, but it should be the norm. A good start would be that someone should ask if every bit of data is really needed and if there is some substitute that would work as well. And consideration for removing data once it is no longer needed.

At some point some high level people will need to lose more than a job.