It was later revealed the information compromised involved sensitive account information including social security and driver’s license numbers as well as dates of birth and email addresses.
This was in several links but this was the only one I could open up without a paywall.
Maybe if the CEO's spent a year or two in prison in a cell 23 hours a day, with no internet, TV or phone and no visitors but their lawyer and no family they would spend some more on security?
https://www.pressdemocrat.com/article/industrynews/patelco-credit-union-cyberattack-fine/