Security breaches not caused by bad luck