> Where are the criminal penalties for reckless security lapses. For criminal fines to send a worthwhile message, they'd need to 1) be of a worthwhile amount a

> Where are the criminal penalties for reckless security lapses. For criminal fines to send a worthwhile message, they'd need to 1) be of a worthwhile amount and 2) equal a reduction in investor returns + executive payouts. Without that, the people in a position to make changes are soundly insulated from their consequences.