This is a very serious matter, but this article omits some important points.
There must be laws and regulations which require every organization handling sensitive information (not only financial institutions and the like) to have sufficiently secure computer systems.
And there must be regular audits of the latter.
Software engineering must be regulated in a manner similar to civil engineering and electrical engineering with respect to reliability, safety, and security.
From the BBC:
Vastaamo hack: My darkest secrets were revealed to the world
<https://www.bbc.com/news/articles/c62nzxqw45eo>