Sony is a huge company with many, many, entry points into their networks. I'm guessing they weren't even remotely prepared to handle a full on cyber invasion.

Also, I believe NK hired out the hacking.