The United States, stepping boldly into the 19th century…
What a contrast between the glorious race to the moon in the 60’s, and medicine by leeches under RFK Jr’s HHS and congresscritters wanting to bring back privateering in 2025… The Roman empire took centuries to collapse, and it only took the US 50 years. Quite stunning.
You don’t need to (and shouldn’t) hold the lowest level employees responsible. Just hold the company responsible with severe fines, like their entire revenue for a year or something. For gross malfeasance, hold the CEO and CISO (or CTO) responsible. That would be enough to see budgets for application and network security teams and training skyrocket. Right now those budgets are as small as possible to avoid catastrophic brand risk.