"...it's impossible to guarantee security" I agree, but with the right laws in place that have appropriate sanctions that cover both corporations and their emp

"...it's impossible to guarantee security" I agree, but with the right laws in place that have appropriate sanctions that cover both corporations and their employees then we'd see a dramatic reduction. A solution won't be found by just prosecuting corporations alone, for as we've seen with Google, Facebook etc. they've billions at their disposal so fines are just part of the cost of doing business. Their employees also have to be held accountable at the risk of being jailed. Few employees would risk jail just to support corporate profits. Carefully-worded law could make this work without being too punitive. Security breaches will still happen and some unavoidable given the state of art etc. In those circumstances employees who could demonstrate their bona fides etc. would be immune from prosecution. It's a matter of political will, cyber security can be greatly improved if the citizenry wants it badly enough.