Should corporate boards face personal accountability for repeated privacy violations?

A data breach is a crime, and we are talking about fining the victim's board of directors for getting robbed. The FBI's 2023 Internet Crime Report logged 880,418 complaints and losses over $12.5 billion, up 22 percent in a year. FBI That is the scale of the adversary: organized criminals, ransomware gangs, state hackers. Now imagine telling a director she faces personal ruin because a ransomware crew outmaneuvered her security team. The perverse result is obvious. Companies will spend the security budget on lawyers instead, because the legal threat is the one with a name on it. Hunt the criminals. Stop billing their victims.