The record theft shows how weak system separation, inadequate controls, and untested attack possibilities can turn one breach into systemic loss.