Cybersecurity Incidents: The Problem Isn’t Just Who Attacks

The article argues that many organizations retain large volumes of sensitive data while maintaining outdated systems, unsegmented networks, weak or reused credentials, misconfigurations, and insufficient monitoring, creating a “structural fragility” that enables recurring breaches; it also criticizes attempts to suppress reporting on breaches—particularly in sensitive sectors like education and health—and calls for greater transparency to protect public interest.