A great example why boards need to provide oversight and assurance of cybersecurity.