More than 200 million customer records were stolen in the largest data breach in history. What’s worse, the hack could have been avoided.