Regulatory failures, funding constraints and industry consolidation have created serious hacking risks.