Large organisations are supposed to be sophisticated and capable of affording incredible security. Time and again they fall to the most unsophisticated attacks.