Reflecting on Sony and Zappos as bellwether data loss crises, it seems especially unsettling that, well before the spring of 2011, much better data breach management practices had already been powerfully codified by experts and effectively implemented by corporate victims.