This is a failure in management, C-level and the board. Period. If the CTO of one of the most "important" data driven companies has two music composition degrees and no technical/data/security chops, the board are zenith level idiots.