I believe big companies like that have a few security experts.
Problem is that there are always guys that are smarter then them.
Plus when a site gets hacked you should format and reinstall everything to do it the best way since hackers usualy leave an opening for them to get back in easily but it's a kinda pain to format and reinstall everything I would say
