Another third-party success story

It seems Ernst & Young decided that keeping their clients' Social Security numbers and tax files secure was far too tedious, so they let an insecure third-party ITSM platform do the leaking for them instead. This marvellous strategy naturally affected hundreds of hapless residents across Texas, Massachusetts, and Vermont. To protect ourselves from this kind of collective failure, we are apparently expected to somehow vet every single external platform our vendors lazily plug into, which is just another lovely Tuesday in my exhausting existence.