I'm not sure. It could be as simple as hackers getting far enough to crack it since it does stay safe for a good while. I think the issue is that companies have no way of knowing how close hackers are to cracking their systems and therefore never know when it is necessary to update or change it. It's not as simple as "not safe enough" because in the end no system is safe. It's just a matter of keeping the upper hand.