The US seems unable to insure information. One hears of action by the US government that are offensive in nature, such as alleged hacks of state actors or in defeating encryption. What is being done about infosec defense? The most encouraging thing I've heard in the business community is from Bank of America where CEO Brian T. Moynihan said, "The only place in the company that doesn’t have a budget constraint is. . ." cyber. He further notes they spend > $400M for this purpose.
Anyhow, the vibe is that things are getting worse and the good guys are losing. One's individual security is already a part time job if one is being diligent.