I think it's unfair to punish someone for a decision they had no part of. How many of the people who had their info leaked had an a part in making the decision

I think it's unfair to punish someone for a decision they had no part of. How many of the people who had their info leaked had an a part in making the decision to go with the security precautions they chose, or even were aware of them. The higher up the chain of command you are the more accountable you should be, but harming the poor folks at the bottom isn't doing anyone any favours.