Netsuite Security - Avoiding the Livingsocial debacle

Many of you might have read that Livingsocial was subject to a cyberattack where personal identifying information of their customers was compromised.  For those of you who store such information, such as client taxpayer IDs, bank account numbers for ACH or wires, credit card numbers, etc., how comfortable are you with Netsuite's security and other operational procedures?  Do you do anything special to augment Netsuite's technology or processes?

While it looks like employee social security numbers may be encrypted at the field level with similar PCI level encryption available on credit card numbers, is there a way to have other fields similar encrypted?  Nowhere do I see any information in help as to whether the bank account numbers used with the Coastal ACH product are encrypted or those used with Netsuite global payments.  Are they?