Comment by throw0101c

> HSBC is on the hook if I get hacked? I can't think of companies having to pay up because their customers got hacked because of their doing. Let alone if it wasn't directly their doing. Solarwinds was for example never forced to pay a dime.

Even if they are not on the hook, there is still the hassle/overhead of dealing with the fraud (e.g., opening an investigation), and/or the bad press when a customer gets hacked and you refuse to refund money per the terms of service:

* https://old.reddit.com/r/PersonalFinanceCanada/comments/1pwh...