>it needs real consequences for companies who let that happen. Companies are ran by business people who often aren't technically literate, or are at a high lev

>it needs real consequences for companies who let that happen. Companies are ran by business people who often aren't technically literate, or are at a high level, or have become detached from it, and so they hire and pay people who lay claim to expertise knowledge to create these systems. Why stop at the companies? Engineers ultimately allowed this, and other such breaches, to happen. We've seen auto engineers in Germany being taken to task over fudging numbers for emissions tests, what if we held software engineers to the same level of liability when their creations result in people's data being stolen?