Data breaches involve the same old mistakes; we must break the cycle