No matter your position on Sony's capitulation to the threats of cyber hackers, it is clear we now have a new paradigm in cyber security.

It was only a few weeks ago I was having a conversation with a friend. We were discussing the risk – a risk inherent in the business of benefit administration – that comes with our responsibility for managing private, personal and health information about the individuals who use our systems to select their benefits. You may or may not be surprised to hear that there is now an open market for this information and that its value varies – as does any commodity – with supply and demand. A very interesting article, here, regarding the drop in value of credit card information immediately following the Home Depot attack, highlights the sophistication of the people who seek this data.

But this is small potatoes.