Closer look at ‘good enough’ security after recent data breaches