The biggest data breaches of all time: what can we learn from them?