[Between Law and Common Sense] Why do security incidents keep happening these days?

A column explains that repeated corporate security incidents stem from more organized attackers, generative AI use, and a wider attack surface from cloud, vendors, and remote access.

It argues many companies have not kept pace with these risks, leaving security management and controls behind the pace of digital expansion.

The revised Personal Information Protection Act strengthens penalties for repeated or large-scale breaches and pushes prevention-focused investment.

It also makes executive responsibility clearer, signaling that preventing breaches is now a legal and management priority.