With many organisations recently suffering from data breaches of its email lists, and the likes of Sony, ACS:Law and most recently Square Enix losing much more sensitive data, it raises the question as to how this has happened.
Is it a problem with the security common algorithms (eg RC4 with 128 bit keys) compared to modern computers? Should a higher minimum key strength be employed?
Have some hackers (whether criminal or more benign) have the upperhand in finding non-obvious weaknesses in common algorithms?
Or, is it simply a case of lazyness/incompetence on the corporate side, using cheaper, less secure methods?