Most of those leaks could have been prevented with a timely audit of the IT infrastructure.