Multiple high-profile companies across a variety of sectors—including Carnival, Wegmans, McDonald’s, Volkswagen, and CVS—have confirmed in recent days they were either victims of a data breach or were alerted to a gap in their security controls. Many of these incidents could have been easily prevented and paint a picture of how vulnerable companies still are to any cyber-attack, never mind the sophisticated ones.

Carnival: The cruise operator Thursday stated in a letter to its customers it had detected “unauthorized third-party access to a limited number of email accounts” in mid-March that potentially exposed certain personal information of guests, employees, and crew members on its Carnival Cruise Line, Holland America Line, and Princess Cruises. The potentially compromised information included Social Security numbers, passport numbers, dates of birth, addresses, and health information.

Jaclyn Jaeger is a freelance contributor to Compliance Week after working for the company for 15 years. She writes on a wide variety of topics, including ethics and compliance, risk management, legal,...