The next large-scale data breach of confidential customer information is a question of "When?" not "If."