IT Security: The Breach Problem