FWIW; the security breach wasn't in 2006 - the code recently stolen was claimed to be FROM 2006 and applies to the xxx 2006 versions of the programs.
At first Symantec tried to brush it off, but yesterday they changed their tone. To me, losing your source code as a security company is probably one of the worst things you could ever do.