Vertical Web Media disclosed a security breach in which an attacker was able to steal customer information. Malicious attackers don’t have to exploit a vulnerability, such as those in operating systems or services, that are known and patched. While a zero-day attack immediately comes to mind, that’s not the only way an attacker can get into fully patched systems. Don’t forget about secure programming practices — especially for Internet-facing applications. If you have a breach, don’t ever try to cover it up (are you listening, TD Ameritrade?)”]
Source: https://www.darkreading.com/attacks-breaches/lessons-from-a-security-breach