Whenever a data breach is announced, the first question is always why - was it due to complacency, an over-estimation of their capabilities, or a lack of knowledge about the threats themselves?  Knowing about the state of the threat landscape is one thing, making sure that the network has the appropriate protection against it is another.