"It’s not enough to protect your data; you need to protect your customers’ data too."