I agree there should perhaps have been better controls in place to check for SQL Injection vulnerabilities, and that yea some businesses try hard to maximise profits, but I would also say that developers are not infallible :)
Without seeing anything standing out on their website, I think this does show the importance of getting your product regularly security audited by and external, third party :)
Yet amazingly there are many employers think the concept of a 4 day work week means compress the 40 hours of work into the 4 days at same pay and then pat themselves on the back for being progressive.