I agree that unless C-level faces jail time, this will keep on happening. But serious security could hamper business growth and in the end shareholder value -

I agree that unless C-level faces jail time, this will keep on happening. But serious security could hamper business growth and in the end shareholder value - not security nor morality - counts. In a capitalist world information security lapses is just the cost of doing business.