Even non-random ones.

Just how many data breach does it get before we collectively realize it: as long as the pain of the breach is on us, corps will never really care about security.

Slam them with 10% of their yearly revenues on the first breach, and they’ll start taking that seriously.