Is this a result of poor IT security?

Absolutely not. We have passed security audits and all of our data is protected. In addition all financial and banking data has been encrypted.