Their stock price was temporarily damaged, and they had to have an awkward hearing in front of congress - that seems light when compared to their negligence whi

Their stock price was temporarily damaged, and they had to have an awkward hearing in front of congress - that seems light when compared to their negligence which handed over financial and personal information for most of the country to hackers unknown. On top of this, they delayed telling the public, they admitted they only encrypt "some" of their data at rest, and a few of their executives sold stock between the time the company knew about the attack and the public didn't. Your argument is wise to consider the "let he who is without sin" perspective, but I don't find it that compelling. They had a hoard of valuable information which they carelessly stored and they paid essentially zero consequences. If I had to choose between this world, and the world where Equifax was just liquidated with the proceeds going to people affected, I'd prefer the latter. "Won't somebody think of the shareholders?" I have, but I've also contemplated the tens of millions harmed by their incompetence.