A very good point. Most companies that pay attention to security worry about the theft of their proprietary data that is otften their primary source of income. Often overlooked is the fact that this data may be of little value to anyone except that particular company and their immediate competitors (whom we can only hope are not so shady as to purchase a rival's stolen data to get ahead). Often when security planning is taking place, the planners ignore other "more mundane" targets because they are focused on their company's objectives, rather than the objectives of the people most likely to be attacking them.

Click to read the article this is in response to.