they apparently just don‘t the greatest web security.
2 hypothetical scenarios with this business:
Scenario 1: Flash mob of 'teens' show up at business. All with hoodies and their face maskies on. They rush in the store, knock the lady down, strip the store, and jump into their KIA's and Hyundai's to take off with the loot. They sell all the goodies at pawn stores or swap meets.
Scenario 2: Group of script kiddies set up a Denial Of Service attack on the company's web site. Crash it from thousands of zombie computers(
computers that their users are unaware that there is malicious code running) logging onto the site and doing thousands of web requests per second, and gain access to the server's database to get their customer information. They then sell this info to vendors on the dark web for resell. They take the credit card info to start ordering goodies to be dropped shipped to safe addresses around the country. These houses are mostly in peaceful neighborhoods with elderly residents that don't go out much, they use the tracking numbers to be waiting a couple of houses down for delivery, and swoop in on bicycles when the package hits the front porch to be off without any identifying items shown. Big profit even if only a small percentage of orders are go through.
In Scenario 1, everyone blames the 'teens' for everything under the sun.
In Scenario 2, everyone blames the store for not having proper security against the latest attack protocol.
This makes as much sense as blaming the store owners in Scenario 1 for not having a platoon of Marines plus a couple of drones with HellFire missiles backing them up as store security.
