Security breach evaluation

  Are companies doing enough to protect their data? Also, do companies really need to keep all this kind of data? Using what you have learned about security breaches, describe what measures should have been taken by the educational service and test preparation provider to avoid the security breach mentioned .