Major Cybersecurity Breaches: Shaping Corporate Cybersecurity Policies and Closing the Gaps

ABSTRACT As digitalization accelerates, cybercrime has intensified in both scale and impact over the past two decades. This study aims to critically examine major cybersecurity events, assess them through the lens of routine activity theory, examine insight from three other established criminological and organizational theories, and address central questions: Why has cybercrime remained so pervasive? What underlying factors explain its persistence? Where do we currently stand, and what can be done to reduce the number and scope of events? This study evaluates six of the most influential cybersecurity events from 2005 to 2024 and analyzes them through the lens of the routine activity theory. Other theories such as general deterrence theory, socio‐technical systems theory, and upper echelons theory are then examined to gain a deeper understanding of the cybercrime events. Analyzing these cases through the appropriate theoretical lens not only deepens our understanding of key vulnerabilities but also reveals why such breaches persist. Based on these insights, we offer recommendations to executive leadership teams. The selected cases demonstrate that cybercrime encomp