lack of investment
This is not a new problem for Travelex. This is years of neglect. In a former job I was a hiring manager for a security department. We had one vacancy. Every single person from the local Travelex I.T. team applied for the role and every single one told the same story during interview of the lack if I.T. Security investment within the company. It's been a car crash waiting to happen for years.
I imagine senior management will pull the same old "we're the victims" like TalkTalk and Vodafone have done previously. We can only hope they're hit with a massive GDPR fine as a warning to others.
Biting the hand that feeds IT
