Regularly news about breached companies pop up. Data gets stolen and leaked. Additionally, the affected companies are being usually blackmailed. The reasons for the security incident are often not examined in detail by outsiders. However, the lessons learned from such incidents are very valuable and can provide support for improving one's own security. This talk will provide insights into real breach cases and what we can learn from them. https://its-now.science