That's a very mealy-mouthed statement for what is basically just "they decided not to invest in security so they could have more money". It makes me sick as an infosec professional seeing publications like this that try and make us feel bad for the poor widdle IT corporation which had to choose between profits and protecting it's own clients (which is the whole job!!). Like I give af.