Secrecy is the name of the game in the web hosting industry. As someone who works in web hosting I can assure you that you would be amazed at the things that happen with no one ever finding out. Entire databases of customer information (including CC) being stolen, every password on a large bank of servers being compromised, etc. This stuff happens more often than you would like to think, and to pretty much all the major players. Secrecy is so large that if a hack happens that costs the company many many thousands of dollars they will still not report it to the FBI in fear of the information being leaked via FOIA request. In some cases they will hunt down the perpetrator and offer them either free hosting for life to be quiet, or on the rare occasion a job.
Occasionally I meet up with a bunch of other nerds that work mostly in hosting, and we swap horror stories from work. It really is widespread and isn't going to change because if a company releases info about their security shortcomings to the public they will lose their customers and go out of business.