It pretty much applies to every market where security negligence isn't an existential threat to the continued existence of its perpetrators.