In theory, bigger organizations have more resources to secure their data.
But smaller organizations also have smaller datasets to protect. When a giant conglomerate like this loses control of its data, it loses control of a LOT of data.
(Compare it to the impact if it was only your local optometrist's customer list that was leaked. More personal, but a lot fewer people.)