Roger Grimes writes in InfoWorld that asking if a database is secure is the old way of thinking. The new way is to know if a data source is valuable it will be hacked or more likely already has been hacked.
If you ask security experts, every database worth stealing is already in the hands of someone who shouldn’t have it. This is not wild conjecture; this is the general, well-understood consensus of the world’s best computer security experts.
via It’s over: All private data is public | Security – InfoWorld.