Hardening security measures should be more important than announcing retaliation like a bunch of angry children. I don't know the nature of all of these attacks

Hardening security measures should be more important than announcing retaliation like a bunch of angry children. I don't know the nature of all of these attacks but didn't Sony get broken into via simple social engineering? The guy literally walked into main lobby and got ahold of network engineer's credentials or something of this kind. A lot of companies have very little to no basic security awareness, let alone any kind of significant security infrastructure in place.