If hobos are a known problem, you have no right to be shocked when one steals a pie.

If hackers are a known problem, a huge company like Twitter has no right to claim it was completely blindsided when it gets hacked.

Twitter is a multinational corporation with access to the personal data of hundreds of millions of users.

It has a duty of care to those users, and at a minimum it should have a dedicated team with security policies and recovery plans.

Aside from the reputational damage, an aggressive and ambitious lawyer could make a good case for a very expensive class action if those plans turn out be defective and/or inadequate.