A big one, but not the first. And it won't be the last. Notice that the company involved was "out of compliance". That likely means they were scrimping on security.