In a perfect world, security threats (OK, they wouldn't exist in a perfect world, but let's ignore that for the moment) would be evenly distributed across industries and broadly distributed across attack vectors. This would enable perfect security officers to formulate even, consistent protections across the entire organization that would rebuff every average (and they would all be average) attack.
Alas and alack, the world doesn't work this way. It is a world of extremes where one industry among dozens and one technology among hundreds is hacked mercilessly, while others are largely ignored. The 2012 Verizon Data Breach Investigations Report found that 74 percent of breaches in 2011 were in two industry groups: retail trade and accommodation and food services.