Just going from memory, their biggest security-breach PR disasters have been caused more often by sloppy employee security than by outside actors.