If their security was that good then I'm a plumber

"...we spotted this situation through the thoroughness of our own security and checking systems."

Earlier on in this piece it said that the breach was discovered by an "independent industry expert".

This is like saying that I'm an expert in plumbing. I had a leak (er no, not that kind), so I called in a plumber, he fixed the leak, I paid him. Do I deserve a pat on the back for fixing the problem, or does the plumber?