RSA Admits SecurID is Compromised: Will Replace 40 Million Tokens

We spotted this today:

"RSA Security is to replace virtually every one of the 40 million SecurID tokens currently in use as a result of the hacking attack the company disclosed back in March. The EMC subsidiary issued a letter to customers acknowledging that SecurID failed to protect defense contractor Lockheed Martin, which last month reported a hack attempt."

Statistics Source: Ars Technica

We tried to digest this number, 40 million, and found that this is rather low. We see SecurID tokens in all IT firms. Well, sometimes, we get the scale of things totally wrong ..